Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft SC-200 Exam - Topic 10 Question 35 Discussion

Your company uses Azure Sentinel.A new security analyst reports that she cannot assign and dismiss incidents in Azure Sentinel. You need to resolve the issue for the analyst. The solution must use the principle of least privilege. Which role should you assign to the analyst?
A) Azure Sentinel Responder
B) Logic App Contributor
C) Azure Sentinel Contributor
D) Azure Sentinel Reader

Microsoft SC-200 Exam - Topic 10 Question 35 Discussion

Actual exam question for Microsoft's SC-200 exam
Question #: 35
Topic #: 10
[All SC-200 Questions]

Your company uses Azure Sentinel.

A new security analyst reports that she cannot assign and dismiss incidents in Azure Sentinel. You need to resolve the issue for the analyst. The solution must use the principle of least privilege. Which role should you assign to the analyst?

Show Suggested Answer Hide Answer
Suggested Answer: A

https://docs.microsoft.com/en-us/azure/sentinel/roles

by Stephen at May 08, 2022, 06:12 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Polly
9 months ago
I’m surprised there’s no specific role for just assigning incidents.
upvoted 0 times
...
Dean
9 months ago
Agreed, Responder is the way to go for least privilege!
upvoted 0 times
...
Chuck
9 months ago
Wait, can she really not assign incidents with just Reader access?
upvoted 0 times
...
Terrilyn
9 months ago
I think Azure Sentinel Contributor would be too much access.
upvoted 0 times
...
Tequila
9 months ago
Definitely need to assign the Azure Sentinel Responder role.
upvoted 0 times
...
Diego
9 months ago
I feel like the Reader role is definitely not the right one, but I can't recall if the Responder is the only one that fits here.
upvoted 0 times
...
Caren
10 months ago
I practiced a similar question, and I think the Responder role is specifically designed for handling incidents.
upvoted 0 times
...
Stanford
10 months ago
I remember that the Azure Sentinel Responder role allows users to manage incidents, so I think that might be the right choice.
upvoted 0 times
...
Rikki
10 months ago
I'm not entirely sure, but I think the Contributor role might give too much access. We need to stick to least privilege.
upvoted 0 times
...
Aimee
10 months ago
This question seems straightforward - I'm pretty confident I know the answer based on what I've learned about workplace privacy laws.
upvoted 0 times
...
Lauran
10 months ago
Hmm, I'm a bit unsure about this one. The JSON structure is not something I'm super familiar with, so I'll need to think it through carefully. Maybe I can eliminate a couple options and then make an educated guess.
upvoted 0 times
...

Save Cancel