exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 7 question 2 discussion

Actual exam question from Microsoft's SC-200
Question #: 2
Topic #: 7
[All SC-200 Questions]

HOTSPOT
-

You have an Azure subscription that contains a user named User1 and a Microsoft Sentinel workspace named WS1.

You need to ensure that User1 can enable User and Entity Behavior Analytics (UEBA) for WS1. The solution must follow the principle of least privilege.

Which roles should you assign to User1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
renrenren
Highly Voted 1 year, 1 month ago
Correct https://learn.microsoft.com/en-us/azure/sentinel/enable-entity-behavior-analytics#prerequisites
upvoted 8 times
...
luisM14
Highly Voted 1 year, 1 month ago
Correct
upvoted 5 times
...
Blasty
Most Recent 2 months ago
Your user must be assigned to the Microsoft Entra ID Security Administrator role in your tenant or the equivalent permissions. Your user must be assigned at least one of the following Azure roles (Learn more about Azure RBAC): Microsoft Sentinel Contributor at the workspace or resource group levels. Log Analytics Contributor at the resource group or subscription levels. https://learn.microsoft.com/en-us/azure/sentinel/enable-entity-behavior-analytics?tabs=azure
upvoted 1 times
...
sapphire
5 months, 3 weeks ago
Correct answer; 204 question copy.
upvoted 2 times
...
Hawklx
10 months, 2 weeks ago
Same as question 82 - Topic 3
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago