What should you create first?

exams SC-200 V8 SC-200 exam 0 Comments

You need to ensure that the processing of incidents generated by rulequery1 meets the Microsoft Sentinel requirements.

What should you create first?
A . a playbook with an incident trigger
B . a playbook with an entity trigger
C . an Azure Automation rule
D . a playbook with an alert trigger

Answer: A