exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 6 question 35 discussion

Actual exam question from Microsoft's SC-200
Question #: 35
Topic #: 6
[All SC-200 Questions]

HOTSPOT
-

You have the Azure subscriptions shown in the following table.



You have a Microsoft Entra tenant that contains the users shown in the following table.



The users have the Azure roles shown in the following table.



You configure Microsoft Copilot for Security capacities as shown in the following table.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Optimizor_IT
Highly Voted 4 months, 1 week ago
User1 can add an additional capacity to Capacity1: Yes Reason: Owner on Sub1 covers RG1 and Capacity1. User2 can view the capacity usage information of Capacity2: Yes Reason: Reader on Sub2 covers RG3 and Capacity2. User3 can configure additional plugins in Capacity2: No Reason: Owner on RG2 doesn’t cover RG3; Global Admin doesn’t grant RBAC on Capacity2.
upvoted 9 times
OneplusOne
2 months, 3 weeks ago
YYY: User3 is Entra global admin and therefore CoPilot owner. The copilot owner can enable plugins within Security CoPilot itself. Azure RBAC role access to the capacity2 is not needed to configure plugins.
upvoted 2 times
Krayzr
2 months, 3 weeks ago
As a Global Administrator in Microsoft Entra, User3 has extensive tenant-wide permissions, primarily for identity and access management. In Azure, Global Administrators can elevate their access to manage subscriptions (gaining User Access Administrator rights), but this is not automatic—it requires an explicit action in the Azure portal. The query implies we should evaluate current permissions, not potential actions User3 could take to grant themselves access. Without an assigned Azure role covering RG3 or Sub2, the Global Administrator role alone does not provide resource-level management permissions for Capacity2.
upvoted 2 times
...
...
...
rkrau
Most Recent 4 months, 1 week ago
I go with Optimizor_IT -> YYN
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...