Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 2 question 26 discussion

Actual exam question from Microsoft's AZ-500

Question #: 26
Topic #: 2

HOTSPOT -
You have an Azure subscription named Sub 1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

Each user is assigned an Azure AD Premium P2 license.
You plan to onboard and configure Azure AD Identity Protection.
Which users can onboard Azure AD Identity Protection, remediate users, and configure policies? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

by debsauce at March 13, 2021, 10:55 p.m.

Comments

Submit Cancel

teehex

Highly Voted 2 years, 6 months ago

Global Administrator and Security Administrator have full access to Identity Protection. However only Global Administrator can onboard Identity Protection. Security Administrator has full access so it can remediate and configure policies. It can't reset user password tho. Security Reader can view all Identity Protection reports and Overview blade. It can't configure policies. https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection#permissions The given answer is correct. - Users who can onboard Azure AD Protection - User1 only - Users who can remediate users and configure policies - User1 and User2 only

upvoted 86 times

...

jessicamendez10

Highly Voted 2 years, 8 months ago

In exam 20/03/2021

upvoted 23 times

Sammy50

2 years, 6 months ago

Thanks

upvoted 2 times

...

awalao

2 years, 1 month ago

thanks Jessica

upvoted 2 times

...

hang10z

2 years, 8 months ago

Thank you Jessica, important info

upvoted 7 times

...

majstor86

Most Recent 8 months, 4 weeks ago

1. User 1 only 2. Users 1 and 2 only

upvoted 4 times

...

Eltooth

1 year, 8 months ago

User 1 User 1 & 2

upvoted 2 times

...

WhalerTom

1 year, 11 months ago

In exam Dec 21. 40 questions, 1 case study, no labs.

upvoted 5 times

...

AS179

1 year, 11 months ago

correct answer

upvoted 2 times

...

rohitmedi

2 years ago

correct answer

upvoted 1 times

...

Incredible99

2 years ago

Not sure how the answer is correct. For Box 1 should be User 1, User 2 and User 3 only. Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection If we check in the permission section, it says "Identity Protection requires users be a Security Reader, Security Operator, Security Administrator, Global Reader, or Global Administrator in order to access.".

upvoted 1 times

jantoniocesargatica

1 year, 7 months ago

The first box is asking who can onboard. that means assigns the Security Administrator Role or any Identity protection role to manage policies, remediate in the AD Identity Protection section... User2 can NOT assign an user from the AD Assigned Role section and assigns a role (for instance Security Administrator) to other users. For that reason only Global Administrator can do this task.

upvoted 4 times

...

ad7399

2 years, 1 month ago

It's an old article, but it describes the roles: https://identityexperts-home.azurewebsites.net/news/protecting-identities-with-azure-active-directory-identity-protection/

upvoted 1 times

...