Microsoft Exam SC-200 Topic 1 Question 79 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 79
Topic #: 1

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint and contains a user named user1 and a Microsoft 365 group named Group1. All users are assigned a Defender for Endpoint Plan 1 license.

You enable Microsoft Defender XDR Unified role-based access control (RBAC) for Endpoints & Vulnerability Management.

You need to ensure that User1 can configure alerts that will send email notifications to Group1. The solution must follow the principle of least privilege.

Which permissions should you assign to User1?

AAlerts investigation

BManage security settings

CDefender Vulnerability Management - Remediation handling

DLive response capabilities: Basic

Show Suggested Answer

Suggested Answer: A

by Georgeanna at Aug 27, 2024, 07:39 AM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nichelle

9 months ago

Haha, can you imagine User1 getting Manage security settings? That's like handing the keys to the kingdom. A) is definitely the way to go.

upvoted 0 times

...

Vivan

9 months ago

I don't know, D) Live response capabilities: Basic sounds kind of cool. But I guess A) is the safer bet for this scenario.

upvoted 0 times

Alesia

8 months ago

I would go with A) as well. It seems like the most appropriate permission for User1 in this scenario.

upvoted 0 times

...

Marlon

8 months ago

D) Live response capabilities: Basic does sound cool, but A) is definitely the safer choice here.

upvoted 0 times

...

Gerald

8 months ago

Yeah, I agree. It follows the principle of least privilege.

upvoted 0 times

...

Kallie

8 months ago

I think A) Alerts investigation is the best option for configuring alerts.

upvoted 0 times

...

Cecily

9 months ago

C) Defender Vulnerability Management - Remediation handling seems like overkill for this task. A) is the obvious choice here.

upvoted 0 times

Gerald

8 months ago

Definitely, it aligns with the principle of least privilege.

upvoted 0 times

...

Mila

8 months ago

I agree, Alerts investigation is the most appropriate permission for configuring alerts.

upvoted 0 times

...

Novella

8 months ago

User1 should be assigned Alerts investigation.

upvoted 0 times

...

Annabelle

10 months ago

I agree, A) Alerts investigation is the way to go. Keeps things simple and follows the principle of least privilege.

upvoted 0 times

...

Ethan

10 months ago

The correct answer is A) Alerts investigation. This gives User1 the ability to configure alerts and send email notifications to Group1 without granting unnecessary permissions.

upvoted 0 times