Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 3 question 29 discussion

Actual exam question from Microsoft's MS-100

Question #: 29
Topic #: 3

You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named
User1.
You enable Azure AD Identity Protection.
You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.
To which role should you add User1?

A. Security reader
B. User administrator
C. Owner
D. Global administrator

Show Suggested Answer

Suggested Answer: A 🗳️

by Eltooth at April 9, 2021, 6:39 a.m.

Comments

Submit Cancel

Eltooth

Highly Voted 4 years, 2 months ago

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection#permissions

upvoted 7 times

...

dumpmaster

Highly Voted 3 years, 5 months ago

Selected Answer: A

Security reader: View all Identity Protection reports and Overview blade. https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

upvoted 5 times

...

Amir1909

Most Recent 1 year, 4 months ago

A is correct

upvoted 1 times

...

Amir1909

1 year, 4 months ago

A is correct

upvoted 1 times

...

Oval61251

2 years, 7 months ago

Key word review, so Security Reader would apply

upvoted 1 times

...

tejb

3 years, 9 months ago

Permissions Identity Protection requires users be a Security Reader, Security Operator, Security Administrator, Global Reader, or Global Administrator in order to access. Source: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

upvoted 2 times

...

fko1978

3 years, 9 months ago

review (=not change) so, Security reader: View all Identity Protection reports and Overview blade

upvoted 3 times

...

TimurKazan

3 years, 10 months ago

so I would go with Global Admin. User Administrator has nothing to do with Azure Identity Protection

upvoted 1 times

Turak64

3 years, 9 months ago

"The solution must use the principle of least privilege."

upvoted 2 times

TimurKazan

3 years, 9 months ago

it is actually the least possible privilege to perform such tasks from this list of given roles

upvoted 1 times

Azreal_75

3 years, 8 months ago

It isn;t, see role descriptions here: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection#permissions

upvoted 3 times

...