SC-200 Manage a security operations environment Practice Question
Your organization uses Microsoft Sentinel with a workspace in the East US region. You have a playbook that runs an automation rule to create a support ticket in ServiceNow. The playbook fails intermittently with a timeout error. You have verified that the playbook's managed identity has the correct permissions. What should you check next?
⚠ Common exam trap
A common mix-up: candidates confuse authentication/authorization (managed identity) with network connectivity, assuming that correct permissions guarantee successful API calls, when in fact network restrictions or regional IP blocking can cause intermittent timeouts even with valid credentials.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that the logic app's network connectivity allows outbound traffic to the ServiceNow endpoint, including any regional restrictions.
The playbook is a Logic App, and intermittent timeout errors when calling an external API (ServiceNow) often indicate network connectivity issues. Since the managed identity permissions are correct, the next logical step is to verify that the Logic App's outbound traffic is allowed to the ServiceNow endpoint, including any regional restrictions that might block or delay traffic from the East US region. This directly addresses the root cause of the timeout.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ensure the playbook is assigned to an Azure Policy that allows outbound connections.
Why it's wrong here
Azure Policy does not control network connectivity for playbooks.
- ✗
Check if the ServiceNow API has rate limits that are being exceeded.
Why it's wrong here
Rate limits can cause failures, but intermittent timeouts suggest network issues.
- ✓
Verify that the logic app's network connectivity allows outbound traffic to the ServiceNow endpoint, including any regional restrictions.
Why this is correct
Intermittent timeouts often indicate network issues like firewall rules or regional routing.
- ✗
Verify that the logic app's workflow is configured to use asynchronous operations.
Why it's wrong here
Asynchronous operations would not cause timeouts; they are for long-running tasks.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-200 question from scratch — 209 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-200 exam.