exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 4 question 10 discussion

Actual exam question from Microsoft's SC-200
Question #: 10
Topic #: 4
[All SC-200 Questions]

HOTSPOT
-

You have a Microsoft 365 E5 subscription that uses Microsoft Defender XDR and contains two users named User1 and User2.

You need to ensure that the users can perform searches by using the Microsoft Purview portal. The solution must meet the following requirements:

• Ensure that User1 can search the Microsoft Purview Audit service logs and review the Microsoft Purview Audit service configuration.
• Ensure that User2 can search Microsoft Exchange Online mailboxes.
• Follow the principle of least privilege.

To which Microsoft Purview role group should you add each user? To answer, select the appropriate options in the answer area

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
laddu001
Highly Voted 1 year ago
User1: Microsoft Purview Audit Reader User2: Microsoft Purview Data Investigator
upvoted 10 times
...
Vokuhila
Highly Voted 1 year ago
Answer is correct
upvoted 6 times
...
Optimizor_IT
Most Recent 2 months, 3 weeks ago
User1: Audit Reader Search audit logs and review audit config with minimal permissions. User2: Data Investigator Search Exchange mailboxes with investigation-focused access, adhering to least privilege as closely as possible.
upvoted 1 times
...
DavidSharl
4 months, 1 week ago
Security Reader: A user that belongs to this role has read-only access to Defender for Cloud. The user can view recommendations, alerts, a security policy, and security states, but can't make changes.
upvoted 1 times
...
talosDevbot
8 months, 3 weeks ago
User 1: Global Reader User 2: Data Investigator It's Global Reader, not Audit Reader. The Audit Reader role lacks the permissions to view configuration. The Global Reader has this ability while also being able to search audit logs (see table in the link, Global Reader has "View-only Audit Logs" permission)
upvoted 2 times
xrxss
8 months, 1 week ago
actually audit reader has that same permission https://learn.microsoft.com/en-us/purview/audit-get-started
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...