Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft SC-200 Exam - Topic 6 Question 31 Discussion

You use Azure Sentinel.You need to use a built-in role to provide a security analyst with the ability to edit the queries of custom Azure Sentinel workbooks. The solution must use the principle of least privilege.Which role should you assign to the analyst?
A) Azure Sentinel Contributor
B) Security Administrator
C) Azure Sentinel Responder
D) Logic App Contributor

Microsoft SC-200 Exam - Topic 6 Question 31 Discussion

Actual exam question for Microsoft's SC-200 exam
Question #: 31
Topic #: 6
[All SC-200 Questions]

You use Azure Sentinel.

You need to use a built-in role to provide a security analyst with the ability to edit the queries of custom Azure Sentinel workbooks. The solution must use the principle of least privilege.

Which role should you assign to the analyst?

Show Suggested Answer Hide Answer
Suggested Answer: A

Azure Sentinel Contributor can create and edit workbooks, analytics rules, and other Azure Sentinel resources.


https://docs.microsoft.com/en-us/azure/sentinel/roles

by Merlyn at May 07, 2022, 10:30 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Taryn
10 months ago
Yeah, least privilege is key, so Contributor makes sense here.
upvoted 0 times
...
Dominga
10 months ago
Wait, are you sure it's not Logic App Contributor? That sounds relevant.
upvoted 0 times
...
Ilda
11 months ago
Azure Sentinel Responder? Seems too limited for editing workbooks.
upvoted 0 times
...
Larae
11 months ago
I thought Security Administrator would work too, but not for editing queries.
upvoted 0 times
...
Lashon
11 months ago
Definitely go with Azure Sentinel Contributor for this!
upvoted 0 times
...
Timmy
11 months ago
Logic App Contributor seems unrelated to workbooks, so I don’t think that’s the answer. I’m leaning towards Azure Sentinel Contributor as well.
upvoted 0 times
...
Ona
11 months ago
I’m a bit confused about the difference between the Azure Sentinel Contributor and the Responder roles. I feel like Contributor is the one we want, but I could be wrong.
upvoted 0 times
...
Xenia
11 months ago
I think the Azure Sentinel Contributor role might be the right choice since it sounds like it allows for editing workbooks, but I'm not entirely sure.
upvoted 0 times
...
Candra
11 months ago
I remember practicing a similar question, and I believe the Security Administrator role has broader permissions than what we need here.
upvoted 0 times
...
Keneth
11 months ago
Okay, let me think this through step-by-step. Total employees = 1,238. Terminations = 56. Turnover rate = 56 / 1,238 = 0.0452 or 4.52%. So the correct answer is C) 22%.
upvoted 0 times
...
Yun
11 months ago
I'm a bit confused on this one. I know Cisco devices have different port assignments, but I'm not sure how that applies to the WSA specifically. I'll have to make an educated guess and move on.
upvoted 0 times
...
Ammie
11 months ago
Hmm, I'm a bit unsure about this one. I know we need to use a vendor prefix for IE, but I'm not sure if -ms- or -o- is the right one. I'll have to double-check my notes.
upvoted 0 times
...
Glen
11 months ago
Hmm, I'm a bit unsure about this. I think the arbiter might monitor the gateway and notify the administrator if a critical error occurs, but I'm not totally sure.
upvoted 0 times
...

Save Cancel