Exam MS-102 topic 1 question 240 discussion

Actual exam question from Microsoft's MS-102

Question #: 240
Topic #: 1

You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1.

You enable Azure AD Identity Protection.

You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.

To which role should you add User1?

A. Compliance Administrator
B. Security Reader
C. Reports Reader
D. User Administrator

Show Suggested Answer

Suggested Answer: B 🗳️

by Paul_white at Oct. 6, 2023, 9:26 p.m.

Comments

Submit Cancel

Paul_white

Highly Voted 1 year, 8 months ago

SECURITY READER IS CORRECT!!!!

upvoted 9 times

...

Clementbhk

Most Recent 7 months, 4 weeks ago

Selected Answer: B

The answer is correct, check this list : https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-by-task#security---users-flagged-for-risk

upvoted 3 times

...

APK1

10 months ago

Selected Answer: B

1 Global Admin 2 Security Admin 3 Security Reader Security reader is the least from the required role.

upvoted 4 times

...

cgr305

10 months, 3 weeks ago

Very useful page / Least privileged roles by a task in Microsoft Entra ID = https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-by-task

upvoted 2 times

...