Microsoft SC-200 Exam - Topic 10 Question 35 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 35
Topic #: 10

Your company uses Azure Sentinel.

A new security analyst reports that she cannot assign and dismiss incidents in Azure Sentinel. You need to resolve the issue for the analyst. The solution must use the principle of least privilege. Which role should you assign to the analyst?

AAzure Sentinel Responder

BLogic App Contributor

CAzure Sentinel Contributor

DAzure Sentinel Reader

Show Suggested Answer

Suggested Answer: A

https://docs.microsoft.com/en-us/azure/sentinel/roles

by Stephen at May 08, 2022, 06:12 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Polly

4 months ago

I’m surprised there’s no specific role for just assigning incidents.

upvoted 0 times

...

Dean

4 months ago

Agreed, Responder is the way to go for least privilege!

upvoted 0 times

...

Chuck

4 months ago

Wait, can she really not assign incidents with just Reader access?

upvoted 0 times

...

Terrilyn

5 months ago

I think Azure Sentinel Contributor would be too much access.

upvoted 0 times

...

Tequila

5 months ago

Definitely need to assign the Azure Sentinel Responder role.

upvoted 0 times

...

Diego

5 months ago

I feel like the Reader role is definitely not the right one, but I can't recall if the Responder is the only one that fits here.

upvoted 0 times

...

Caren

5 months ago

I practiced a similar question, and I think the Responder role is specifically designed for handling incidents.

upvoted 0 times

...

Stanford

5 months ago

I remember that the Azure Sentinel Responder role allows users to manage incidents, so I think that might be the right choice.

upvoted 0 times

...

Rikki

5 months ago

I'm not entirely sure, but I think the Contributor role might give too much access. We need to stick to least privilege.

upvoted 0 times

...

Aimee

5 months ago

This question seems straightforward - I'm pretty confident I know the answer based on what I've learned about workplace privacy laws.

upvoted 0 times

...

Lauran

5 months ago

Hmm, I'm a bit unsure about this one. The JSON structure is not something I'm super familiar with, so I'll need to think it through carefully. Maybe I can eliminate a couple options and then make an educated guess.

upvoted 0 times

...