Valid SC-200 Dumps shared by ExamDiscuss.com for Helping Passing SC-200 Exam! ExamDiscuss.com now offer the newest SC-200 exam dumps, the ExamDiscuss.com SC-200 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com SC-200 dumps with Test Engine here:
Your company uses Microsoft Sentinel A new security analyst reports that she cannot assign and resolve incidents in Microsoft Sentinel. You need to ensure that the analyst can assign and resolve incidents. The solution must use the principle of least privilege. Which role should you assign to the analyst?
Correct Answer: A
The Microsoft Sentinel Responder role allows users to investigate, triage, and resolve security incidents, which includes the ability to assign incidents to other users. This role is designed to provide the necessary permissions for incident management and response while still adhering to the principle of least privilege. Other roles such as Logic App Contributor and Microsoft Sentinel Contributor would have more permissions than necessary and may not be suitable for the analyst's needs. Microsoft Sentinel Reader role is not sufficient as it doesn't have permission to assign and resolve incidents. Reference: https://docs.microsoft.com/en-us/azure/sentinel/role-based-access-control-rbac