Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 3 question 83 discussion

Actual exam question from Microsoft's MS-101

Question #: 83
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You create a Microsoft Defender for Identity instance named Contoso.
The tenant contains the users shown in the following table.

You need to modify the configuration of the Defender for Identity sensors.
Solution: You instruct User2 to modify the Defender for Identity sensor configuration.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by bk_apex at Dec. 13, 2021, 3:42 a.m.

Comments

Submit Cancel

hufflepuff

2 years, 4 months ago

Selected Answer: B

Defender for Identity provides three types of security groups: Azure ATP (Workspace name) Administrators, Azure ATP (Workspace name) Users, and Azure ATP (Workspace name) Viewers. Update Defender for Identity Configuration - Sensors (download, regenerate key, configure, delete) is not available to the "Users" group, only "Admin". https://learn.microsoft.com/en-us/defender-for-identity/role-groups

upvoted 2 times

...

IPalot

2 years, 5 months ago

Selected Answer: B

No. Defender for Identity provides three types of security groups: Azure ATP (instance name) Administrators, Azure ATP (instance name) Users, and Azure ATP (instance name) Viewers. The 'User' group : Update Defender for Identity Configuration - Sensors (download, regenerate key, configure, delete) for 'Users' : Not available

upvoted 1 times

IPalot

2 years, 5 months ago

The ones who could are users 1,3 and 4.

upvoted 2 times

...

LillyLiver

3 years, 4 months ago

The questions groups have "Defender for Identity Contoso {Administrator/Users}." Now, Defender for Identity is what Azure ATP was rebranded to. However the groups that are created are still using the "Azure ATP {tenant name} {Administrator/Viewers/Users}" format. I don't know if this question is trying to trip you up with the naming of the groups, or if the question was written incorrectly by ExamTopics. Maybe It's an old question? I'm not sure. Given the information from my tenant, and what is in the question, the answer is No. Unless the question is old. Then the groups follow the current format, then the questions answer is Yes. If you're taking the 101 exam anytime after 2/1/2022 I'm betting the groups will follow the "Azure ATP {tenant name} {Administrator/Viewers/Users}" format. Clear as mud.

upvoted 4 times

...

haazybanj

3 years, 5 months ago

Answer is outright Yes https://docs.microsoft.com/en-us/defender-for-identity/role-groups

upvoted 2 times

...

[Removed]

3 years, 5 months ago

Selected Answer: B

In my Tenant the Groups are named „Azure ATP %tenantname% Administrator“ and so on.. Can anyone confirm? Then it would clearly be B.

upvoted 4 times

...

JT19760106

3 years, 6 months ago

Seems obvious to me that the answer is YES as User 1, 3, or 4 could have carried out the task according to https://docs.microsoft.com/en-us/defender-for-identity/role-groups

upvoted 2 times

...

ZuluHulu

3 years, 6 months ago

This one is a bit confusing. If I call a group Administrators, it doesn't mean that it has admin privilege unless that's the account type that I set. So "A" may not necessarily be correct?

upvoted 4 times

PDR

3 years, 5 months ago

agree, as it stands that answer is not correct as it says the user has no role

upvoted 1 times

...

jodtzz

3 years, 6 months ago

Yeah the wording is ambiguous and as it's written the answer is no, but I bet the actual exam has a different heading in the 2nd column.

upvoted 2 times

...

bk_apex

3 years, 6 months ago

Note - Azure Advanced Threat Protection (ATP) has been rebranded as Defender for Identity. Previous versions of this question reference Azure ATP rather than Defender for Identity. https://docs.microsoft.com/en-us/defender-for-identity/what-is

upvoted 2 times

...