Valid SC-200 Dumps shared by ExamDiscuss.com for Helping Passing SC-200 Exam! ExamDiscuss.com now offer the newest SC-200 exam dumps, the ExamDiscuss.com SC-200 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com SC-200 dumps with Test Engine here:
Access SC-200 Dumps Premium Version
(370 Q&As Dumps, 35%OFF Special Discount Code: freecram)
<< Prev Question Next Question >>
Question 19/96
You need to assign role-based access control (RBAQ roles to Group1 and Group2 to meet The Microsoft Defender for Cloud requirements and the business requirements Which role should you assign to each group? To answer, select the appropriate options in the answer area NOTE Each correct selection is worth one point.
Correct Answer:
- Question List (96q)
- 1 commentQuestion 1: You need to configure DC1 to meet the business requirements....
- 1 commentQuestion 2: You have an Azure subscription that uses Microsoft Defender ...
- Question 3: HOTSPOT for the Azure virtual You need to recommend remediat...
- 1 commentQuestion 4: You have an Azure subscription that contains an Azure logic ...
- Question 5: You use Microsoft Sentinel. You need to receive an alert in ...
- Question 6: Your company has a single office in Istanbul and a Microsoft...
- Question 7: You have an Azure subscription that uses Microsoft Sentinel....
- Question 8: You have a Microsoft 365 E5 subscription. You plan to perfor...
- Question 9: You need to recommend a solution to meet the technical requi...
- Question 10: You recently deployed Azure Sentinel. You discover that the ...
- 1 commentQuestion 11: You have a Microsoft Sentinel workspace. You receive multipl...
- Question 12: You need to configure Microsoft Cloud App Security to genera...
- Question 13: You create a custom analytics rule to detect threats in Azur...
- 1 commentQuestion 14: You have a Microsoft 365 subscription that uses Microsoft De...
- Question 15: You need to visualize Azure Sentinel data and enrich the dat...
- Question 16: You have the following SQL query. (Exhibit)...
- Question 17: Note: This question is part of a series of questions that pr...
- 1 commentQuestion 18: You have an Azure subscription that contains an Microsoft Se...
- 2 commentQuestion 19: You need to assign role-based access control (RBAQ roles to ...
- 1 commentQuestion 20: You have a third-party security information and event manage...
- Question 21: You have a Microsoft Sentinel workspace named sws1. You need...
- 1 commentQuestion 22: You need to correlate data from the SecurityEvent Log Anaryt...
- Question 23: You need to implement Azure Defender to meet the Azure Defen...
- 1 commentQuestion 24: You have an Azure subscription that uses Microsoft Sentinel....
- Question 25: You have a Microsoft Sentinel workspace that contains an Azu...
- Question 26: You have an Azure subscription that has Azure Defender enabl...
- 1 commentQuestion 27: You have a Microsoft Sentinel workspace named Workspace1. Yo...
- 1 commentQuestion 28: You have a Microsoft Sentinel workspace named sws1. You plan...
- 1 commentQuestion 29: You provision Azure Sentinel for a new Azure subscription. Y...
- 1 commentQuestion 30: You are configuring Azure Sentinel. You need to send a Micro...
- 1 commentQuestion 31: Note: This question is part of a series of questions that pr...
- 1 commentQuestion 32: You have a Microsoft Sentinel workspace named Workspace1 and...
- 1 commentQuestion 33: Your network contains an on-premises Active Directory Domain...
- 1 commentQuestion 34: You have an Azure subscription that contains a quest user na...
- Question 35: You use Azure Defender. You have an Azure Storage account th...
- Question 36: You have a Microsoft 365 subscription that uses Microsoft De...
- Question 37: You use Azure Sentinel to monitor irregular Azure activity. ...
- Question 38: You have five on-premises Linux servers. You have an Azure s...
- Question 39: You have a Microsoft 365 tenant that uses Microsoft Exchange...
- 1 commentQuestion 40: You have a Microsoft subscription that has Microsoft Defende...
- 1 commentQuestion 41: You have a Microsoft Sentinel workspace that contains the fo...
- 1 commentQuestion 42: Note: This question is part of a series of questions that pr...
- 1 commentQuestion 43: You have a Microsoft 365 E5 subscription that contains 200 W...
- 1 commentQuestion 44: You have an Azure subscription that contains an Microsoft Se...
- 1 commentQuestion 45: You have an Azure subscription that contains a Microsoft Sen...
- Question 46: Note: This question is part of a series of questions that pr...
- 1 commentQuestion 47: You need to create a query to investigate DNS-related activi...
- 1 commentQuestion 48: You need to meet the Microsoft Defender for Cloud Apps requi...
- Question 49: You create an Azure subscription. You enable Azure Defender ...
- 1 commentQuestion 50: You need to implement the Azure Information Protection requi...
- 2 commentQuestion 51: You have a Microsoft Sentinel workspace that has User and En...
- 1 commentQuestion 52: You need to restrict cloud apps running on CLIENT1 to meet t...
- Question 53: You have the following KQL query. (Exhibit)...
- 2 commentQuestion 54: You have an Azure subscription that uses Microsoft Defender ...
- Question 55: You create an Azure subscription. You enable Microsoft Defen...
- Question 56: You need to create a query for a workbook. The query must me...
- Question 57: Note: This question is part of a series of questions that pr...
- 1 commentQuestion 58: You have an existing Azure logic app that is used to block A...
- 1 commentQuestion 59: You need to remediate active attacks to meet the technical r...
- Question 60: You need to implement Azure Sentinel queries for Contoso and...
- 1 commentQuestion 61: A security administrator receives email alerts from Azure De...
- 1 commentQuestion 62: You have an Azure subscription that uses Microsoft Defender ...
- Question 63: You have the following environment: Azure Sentinel A Microso...
- Question 64: You have an Azure subscription named Sub1 and a Microsoft 36...
- Question 65: Note: This question is part of a series of questions that pr...
- Question 66: You open the Cloud App Security portal as shown in the follo...
- 1 commentQuestion 67: You plan to create a custom Azure Sentinel query that will p...
- 1 commentQuestion 68: Your company has an on-premises network that uses Microsoft ...
- 1 commentQuestion 69: You have two Azure subscriptions that use Microsoft Defender...
- 1 commentQuestion 70: You use Azure Sentinel. You need to use a built-in role to p...
- Question 71: You have an Azure subscription. You need to delegate permiss...
- 1 commentQuestion 72: You have a custom Microsoft Sentinel workbook named Workbook...
- Question 73: You have an Azure subscription named Sub1 and a Microsoft 36...
- Question 74: You have an Azure subscription that uses resource type for C...
- Question 75: You need to create the analytics rule to meet the Azure Sent...
- 1 commentQuestion 76: You have a Microsoft 365 subscription. The subscription uses...
- 1 commentQuestion 77: You have 100 Azure subscriptions that have enhanced security...
- 1 commentQuestion 78: You have a Microsoft Sentinel workspace named workspace1 tha...
- 1 commentQuestion 79: You have 50 on-premises servers. You have an Azure subscript...
- Question 80: You have an Azure subscription that has Azure Defender enabl...
- 1 commentQuestion 81: You have an Azure subscription that uses Microsoft Defender ...
- 1 commentQuestion 82: You have a suppression rule in Azure Security Center for 10 ...
- Question 83: You use Azure Sentinel. You need to receive an immediate ale...
- 1 commentQuestion 84: You create a new Azure subscription and start collecting log...
- 1 commentQuestion 85: You need to ensure that you can run hunting queries to meet ...
- Question 86: You need to configure the Azure Sentinel integration to meet...
- Question 87: Note: This question is part of a series of questions that pr...
- 1 commentQuestion 88: You have an Azure subscription that uses Microsoft Sentinel....
- Question 89: You plan to connect an external solution that will send Comm...
- 1 commentQuestion 90: You have a Microsoft 365 E5 subscription that uses Microsoft...
- 1 commentQuestion 91: You have an Azure subscription that uses Microsoft Defender ...
- 1 commentQuestion 92: You have an Azure subscription that uses Microsoft Defender ...
- Question 93: You have a Microsoft 365 E5 subscription that uses Microsoft...
- Question 94: Your company uses Azure Sentinel. A new security analyst rep...
- Question 95: You are responsible for responding to Azure Defender for Key...
- 1 commentQuestion 96: You purchase a Microsoft 365 subscription. You plan to confi...
Recent Comments (The most recent comments are at the top.)
Based on the business (least privilege permission) and MS Defender for Cloud requirements given below - note for group1 it specifically says permission will go at the Subscription level
• Ensure that the members of Group2 can modify security policies.
• Ensure that the members of Group1 can assign regulatory compliance policy initiatives at the Azure subscription level.
Answers are:
Group1 ---> Owner (because it is at the subscription level and only Owner at this level)
Group2 ---> Security Admin (because of least privilege and the question does not say specifically if it is at the subscription level)
Source: https://learn.microsoft.com/en-us/azure/defender-for-cloud/permissions#roles-and-allowed-actions
You can create a Playbook in the automation blade of Sentinel. Also, when you are creating the playbook, as part of the process you will create a logic app.
You do NOT need to create an automation rule for creating a playbook. The playbooks can run independent of the automation rule as well.