What should you do when you create the rule?

You need to create the test rule to meet the Azure Sentinel requirements.

What should you do when you create the rule?
A . From Set rule logic, turn off suppression.
B. From Analytics rule details, configure the tactics.
C. From Set rule logic, map the entities.
D. From Analytics rule details, configure the severity.

View Answer

Answer: C

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/sentinel/tutorial-detect-threats-custom