Exam SC-200 topic 6 question 33 discussion

Actual exam question from Microsoft's SC-200

Question #: 33
Topic #: 6

HOTSPOT
-

You have an Azure subscription named Sub1 that contains the resources shown in the following table.

You plan to configure Rule1 to trigger Lapp1 when an incident is generated.

You need to recommend the role-based access control (RBAC) role that you should assign to WS1, and the scope at which should you assign the role. The solution must follow the principle of least privilege.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Optimizor_IT at April 10, 2025, 2:14 p.m.

Comments

Submit Cancel

Optimizor_IT

4 weeks, 1 day ago

Role: Microsoft Sentinel Playbook Operator gives WS1 the ability to trigger LApp1 (Microsoft.Logic/workflows/trigger/action), which is exactly what Rule1 needs to invoke the Logic App when an incident fires. Scope: Assigning it to LApp1 limits the permission to just that Logic App, adhering to least privilege by not granting unnecessary access to RG2, RG1, or Sub1. Managed Identity: WS1 likely uses a system-assigned managed identity (common for Sentinel automation). Assigning this role to that identity at LApp1’s scope completes the chain.

upvoted 2 times

...

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 6 question 33 discussion

Comments

Optimizor_IT

SY0-701