Microsoft Exam SC-200 Topic 1 Question 70 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 70
Topic #: 1

You have an Azure subscription that has the enhanced security features in Microsoft Defender for Cloud enabled and contains a user named User1.

You need to ensure that User1 can export alert data from Defender for Cloud. The solution must use the principle of least privilege.

Which role should you assign to User1?

AContributor

BUser Access Administrator

COwner

DReader

Show Suggested Answer

Suggested Answer: C

by Dallas at Apr 30, 2024, 12:11 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

4 months ago

I’m leaning towards A) Contributor. It provides export capabilities without too much power.

upvoted 0 times

...

4 months ago

I think it’s D) Reader. More restrictive, but easier to justify minimized access.

upvoted 0 times

...

4 months ago

What about User Access Administrator? Seems like it fits the least privilege requirement.

upvoted 0 times

...

5 months ago

Yeah, but Reader doesn’t have export permissions, right?

upvoted 0 times

...

5 months ago

I agree. Contributor seems too much for just exporting alert data.

upvoted 0 times

...

5 months ago

This question feels tricky. Least privilege is usually the way to go.

upvoted 0 times

...