Microsoft SC-200 Exam - Topic 6 Question 31 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 31
Topic #: 6

You use Azure Sentinel.

You need to use a built-in role to provide a security analyst with the ability to edit the queries of custom Azure Sentinel workbooks. The solution must use the principle of least privilege.

Which role should you assign to the analyst?

AAzure Sentinel Contributor

BSecurity Administrator

CAzure Sentinel Responder

DLogic App Contributor

Show Suggested Answer

Suggested Answer: A

Azure Sentinel Contributor can create and edit workbooks, analytics rules, and other Azure Sentinel resources.

https://docs.microsoft.com/en-us/azure/sentinel/roles

by Merlyn at May 07, 2022, 10:30 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Taryn

4 months ago

Yeah, least privilege is key, so Contributor makes sense here.

upvoted 0 times

...

Dominga

4 months ago

Wait, are you sure it's not Logic App Contributor? That sounds relevant.

upvoted 0 times

...

Ilda

4 months ago

Azure Sentinel Responder? Seems too limited for editing workbooks.

upvoted 0 times

...

Larae

4 months ago

I thought Security Administrator would work too, but not for editing queries.

upvoted 0 times

...

Lashon

5 months ago

Definitely go with Azure Sentinel Contributor for this!

upvoted 0 times

...

Timmy

5 months ago

Logic App Contributor seems unrelated to workbooks, so I don’t think that’s the answer. I’m leaning towards Azure Sentinel Contributor as well.

upvoted 0 times

...

Ona

5 months ago

I’m a bit confused about the difference between the Azure Sentinel Contributor and the Responder roles. I feel like Contributor is the one we want, but I could be wrong.

upvoted 0 times

...

Xenia

5 months ago

I think the Azure Sentinel Contributor role might be the right choice since it sounds like it allows for editing workbooks, but I'm not entirely sure.

upvoted 0 times

...

Candra

5 months ago

I remember practicing a similar question, and I believe the Security Administrator role has broader permissions than what we need here.

upvoted 0 times

...

Keneth

5 months ago

Okay, let me think this through step-by-step. Total employees = 1,238. Terminations = 56. Turnover rate = 56 / 1,238 = 0.0452 or 4.52%. So the correct answer is C) 22%.

upvoted 0 times

...

Yun

5 months ago

I'm a bit confused on this one. I know Cisco devices have different port assignments, but I'm not sure how that applies to the WSA specifically. I'll have to make an educated guess and move on.

upvoted 0 times

...

Ammie

5 months ago

Hmm, I'm a bit unsure about this one. I know we need to use a vendor prefix for IE, but I'm not sure if -ms- or -o- is the right one. I'll have to double-check my notes.

upvoted 0 times

...

Glen

5 months ago

Hmm, I'm a bit unsure about this. I think the arbiter might monitor the gateway and notify the administrator if a critical error occurs, but I'm not totally sure.

upvoted 0 times

...