MENU
You have an Azure subscription that has the enhanced security features in Microsoft Defender for Cloud enabled and contains a user named User1.
You need to ensure that User1 can export alert data from Defender for Cloud. The solution must use the principle of least privilege.
Which role should you assign to User1?
Suggested Answer: C
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
BE
Belen
10 months ago
Really? I thought they needed more permissions to export data.
AR
Aretha
11 months ago
Definitely not Owner, that’s way too much access!
CL
Clorinda
11 months ago
Wait, why not Contributor? Seems like overkill.
RU
Rutha
11 months ago
I agree, Reader is the way to go!
CA
Carole
11 months ago
User1 should get the Reader role for least privilege.
JE
Jennie
12 months ago
I’m leaning towards the Reader role too, but I wonder if there’s a specific role for exporting data that I might have missed in my studies.
AS
Ashley
12 months ago
I feel like the User Access Administrator role could be relevant, but it seems like overkill for just exporting alerts.
PI
Pilar
12 months ago
I remember practicing a question about role assignments, and I think the Contributor role might be too much access for just exporting data.
MO
Mohammad
1 year ago
I think User1 might need the Reader role since they only need to export alert data, but I'm not completely sure.
CE
Celeste
1 year ago
I've got this one! The Reader role is the way to go. It provides the necessary permissions to export alert data from Defender for Cloud without giving User1 too much access.
LO
Lorenza
1 year ago
I'm a bit confused on this one. Is the Contributor role sufficient, or do I need to go with something more specific like the Reader role? I'll need to double-check the details on each role.
RE
Renato
1 year ago
Okay, I think I know the answer here. The User Access Administrator role should give User1 the ability to export alert data from Defender for Cloud without granting them unnecessary permissions.
HA
Haley
1 year ago
Hmm, I'm not too familiar with the different Azure roles and their permissions. I'll need to do some research on that to figure out the right one to assign to User1.
SH
Shawna
1 year ago
This seems straightforward. I'll need to review the Azure role definitions to determine which one allows exporting alert data from Defender for Cloud while following the principle of least privilege.
CH
Chuck
1 year ago
Okay, I've got this. Fred and his team are performing qualitative risk analysis by combining the probability and impact of the risks to prioritize them. I'm confident I can answer this correctly.
FR
Freeman
1 year ago
Definitely going with an audited implementation like OpenZeppelin is the way to go. That way, I can focus on customizing the token to my needs without worrying about the core functionality.
MI
Mitsue
1 year ago
I think it's apply_amps.sh, but I feel a bit shaky on that—didn't we go over something similar in practice questions last week?
OM
Omega
1 year ago
These multiple-choice questions always try to trick you with subtle wording. I'll cross out anything that sounds obviously wrong first.
IN
Ines
1 year ago
I think we definitely need to test the application with the peripheral to ensure it handles inputs and outputs correctly. That seems really important.
MA
Marylou
2 years ago
Ha! Imagine giving User1 the C) Owner role just to let them export some alerts. That's like using a bazooka to kill a fly. I vote for D) Reader.
GA
Gayla
2 years ago
B) User Access Administrator sounds like overkill to me. I'd go with D) Reader - it seems to fit the requirement of being able to export alert data without giving too much control.
TR
Truman
2 years ago
Yeah, I think giving User1 the Reader role is the most secure choice here.
BR
Brinda
2 years ago
I agree, D) Reader seems like the best option for this scenario.
KA
Kanisha
2 years ago
I think A) Contributor might be too much access for just exporting alert data.
TO
Torie
2 years ago
Reader it is then, let's go with that.
JU
Julie
2 years ago
I agree, D) Reader seems like the best option for least privilege.
JE
Jerry
2 years ago
I agree, it seems like the most appropriate role for exporting alert data.
ST
Stephanie
2 years ago
I think D) Reader is the best choice for User1.
DE
Devon
2 years ago
Definitely not C) Owner. That would be way too much power for this task. I think D) Reader is the best choice to follow the principle of least privilege.
UL
Ulysses
2 years ago
Yes, D) Reader would be the best choice to limit User1's access.
CA
Cassie
2 years ago
I agree, C) Owner is definitely too much power for just exporting alert data.