Exam MS-101 topic 3 question 69 discussion

Actual exam question from Microsoft's MS-101

Question #: 69
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You create a Microsoft Defender for Identity instance named Contoso.
The tenant contains the users shown in the following table.

You need to modify the configuration of the Defender for Identity sensors.
Solution: You instruct User3 to modify the Defender for Identity sensor configuration.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️

by MitalWulf at Feb. 20, 2022, 1:33 p.m.

Comments

Submit Cancel

harburn422

Highly Voted 3 years, 2 months ago

Selected Answer: A

"A" tricky tricky. Two questions different user and role (same as Question 66 in Topic3 here). Any global administrator or security administrator on the tenant's Azure Active Directory is automatically an Azure ATP administrator. References: https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-role-groups

upvoted 5 times

...

Contactfornitish

Most Recent 2 years, 9 months ago

The action needs *Azure ATP (instance name) Administrators* Any global administrator or security administrator on the tenant's Azure Active Directory is automatically a Defender for Identity administrator. That means User1, User3 or User4 should be able to take the action. https://docs.microsoft.com/en-us/defender-for-identity/role-groups

upvoted 2 times

...

Sinned

2 years, 10 months ago

I don't get this one actually. The group name is "Defender for Identity Contoso Administrators". However, what roles are assigned to it? There could be no roles assigned at all for as far as I can tell...

upvoted 3 times

AVR31

2 years, 9 months ago

Correct. That group could have any permissions or no permissions at all.

upvoted 1 times

...

MitalWulf

3 years, 2 months ago

once again nice = a