Microsoft MS-102 Exam - Topic 1 Question 5 Discussion

Actual exam question for Microsoft's MS-102 exam

Question #: 5
Topic #: 1

You have an Azure AD tenant and a Microsoft 365 E5 subscription. The tenant contains the users shown in the following table.

You plan to implement Microsoft Defender for Endpoint.

You verify that role-based access control (RBAC) is turned on in Microsoft Defender for Endpoint.

You need to identify which user can view security incidents from the Microsoft 365 Defender portal.

Which user should you identify?

AUser1

BUser2

CUser3

DUser4

Show Suggested Answer

Suggested Answer: A

by Alisha at Jul 07, 2023, 04:35 AM

Limited Time Offer

25%

Off

Get Premium MS-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lavonne

4 months ago

I thought only admins could view security incidents, this is confusing!

upvoted 0 times

...

Mollie

4 months ago

Wait, are you sure User4 can't access it?

upvoted 0 times

...

Desmond

4 months ago

Definitely User1, they have the right role.

upvoted 0 times

...

Nguyet

4 months ago

I think User2 might be able to see them too.

upvoted 0 times

...

Deja

4 months ago

User3 has the right permissions for that.

upvoted 0 times

...

Lyndia

5 months ago

I’m leaning towards User4, but I’m a bit confused about how RBAC impacts their access in this scenario.

upvoted 0 times

...

Thurman

5 months ago

I feel like User1 could be a candidate too, but I need to double-check what roles they have assigned.

upvoted 0 times

...

Selma

5 months ago

I remember a practice question where User2 had similar permissions, but I can't recall if they had access to security incidents specifically.

upvoted 0 times

...

Yoko

5 months ago

I think User3 might be the right choice since they have the Security Administrator role, but I'm not entirely sure.

upvoted 0 times

...

Honey

5 months ago

Okay, I think I've got this. The key is that a single component can't be exposed as all those different service types at the same time. I'll need to pick the right one for this use case.

upvoted 0 times

...

Francisca

5 months ago

This seems familiar, was there a similar question about modes in one of our practice exams?

upvoted 0 times

...

Ardella

5 months ago

I'm feeling pretty confident about this. Deduplication is a common data backup technique, and the explanation makes it clear that the index for the duplicate block is deleted. I'll select True.

upvoted 0 times

...