Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

In Microsoft Sentinel, automated response is delivered through playbooks. A playbook is an Azure Logic Apps workflow that can be triggered by an alert or incident, allowing Sentinel to orchestrate response actions such as disabling user accounts, isolating hosts, or sending notifications. Workbooks are used for interactive reports and dashboards, watchlists store reference data, and data connectors bring external logs into Sentinel, but none of these automate response actions.