Câu 79: MS-500: Microsoft 365 Security Administration

You have an Azure Sentinel workspace that has an Azure Active Directory (Azure AD) connector and a Microsoft Office 365 connector. You need to use a Fusion rule template to detect multistage attacks in which users sign in by using compromised credentials, and then delete multiple files fromMicrosoft OneDrive. Based on the Fusion rule template, you create an active rule that has the default settings. What should you do next?

1. A. Add data connectors.
2. B. Add a workbook. — đáp án hiện tại
3. C. Add a playbook.
4. D. Create a custom rule template.