Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 3 question 13 discussion

Actual exam question from Microsoft's SC-200

Question #: 13
Topic #: 3

DRAG DROP -
Your company deploys Azure Sentinel.
You plan to delegate the administration of Azure Sentinel to various groups.
You need to delegate the following tasks:
✑ Create and run playbooks
✑ Create workbooks and analytic rules.
The solution must use the principle of least privilege.
Which role should you assign for each task? To answer, drag the appropriate roles to the correct tasks. Each role may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/roles

by NoNameP at Aug. 30, 2021, 2:05 p.m.

Comments

Submit Cancel

Eltooth

Highly Voted 3 years, 2 months ago

Correct - logic app contributor and sentinel contributor.

upvoted 9 times

...

Ramye

Most Recent 10 months, 2 weeks ago

Given answers are correct. But note: it's now called Microsoft Sentinel and not Azure Sentinel https://learn.microsoft.com/en-us/azure/sentinel/roles

upvoted 4 times

...

be9z

1 year, 1 month ago

Once you've assigned the "Logic App Contributor" role, the designated users or service principals will have the necessary permissions to create, modify, and run Logic Apps, including the Logic Apps associated with Azure Sentinel playbooks. Keep in mind that role assignments may take a few minutes to propagate.

upvoted 1 times

...

chepeerick

1 year, 2 months ago

Correct, Logic app to playbooks

upvoted 2 times

...

ExamTopicsTST

1 year, 10 months ago

Answer is correct: https://learn.microsoft.com/en-us/azure/sentinel/roles#microsoft-sentinel-roles-permissions-and-allowed-actions

upvoted 4 times

...

Ramkid

1 year, 11 months ago

Given answers are (not) correct. Only Logic App Contributor role is allowed to create and edit the play books as per the link below https://learn.microsoft.com/en-us/azure/sentinel/roles#microsoft-sentinel-roles-permissions-and-allowed-actions The question is about the “Create and run playbooks”. Logic App contributor role is not sufficient to Run the play book. You need atleast “Microsoft Sentinel Playbook Operator” to run the play book as per the below link. https://learn.microsoft.com/en-us/azure/sentinel/roles#other-roles-and-permissions

upvoted 1 times

herta

1 year, 11 months ago

i think you are wrong based on this https://learn.microsoft.com/en-us/azure/sentinel/roles logic app contributor can view and run playbooks This table summarizes the Microsoft Sentinel roles and their allowed actions in Microsoft Sentinel.

upvoted 6 times

...

ACSC

2 years ago

Answer is correct https://learn.microsoft.com/en-us/azure/sentinel/roles#other-roles-and-permissions

upvoted 3 times

...

amsioso

2 years, 3 months ago

https://docs.microsoft.com/en-us/azure/sentinel/roles#other-roles-and-permissions

upvoted 1 times

...

Fury

2 years, 4 months ago

https://docs.microsoft.com/en-us/azure/sentinel/roles Logic Apps Contributor - Attach playbooks to analytics and automation rules and run playbooks. Note: This role also allows users to modify playbooks. Logic apps contributor cannot be the right answer as it can't create playbooks. Sentinel contributor for both.

upvoted 2 times

...