exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 9 question 4 discussion

Actual exam question from Microsoft's SC-200
Question #: 4
Topic #: 13
[All SC-200 Questions]

You need to assign a role-based access control (RBAC) role to admin1 to meet the Azure Sentinel requirements and the business requirements.
Which role should you assign?

  • A. Automation Operator
  • B. Automation Runbook Operator
  • C. Azure Sentinel Contributor
  • D. Azure Sentinel Responder
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Lion007
Highly Voted 2 years, 5 months ago
Selected Answer: C
Azure Sentinel Contributor is the only provided correct role. If "Log Analytics Contributor" or "Microsoft Sentinel Automation Contributor" they would be better suited to meet the business requirement for least privilege. Contributor: "Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries." Ref https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor
upvoted 9 times
Lion007
2 years, 5 months ago
Correction: "Logic App Contributor" instead of "Log Analytics Contributor"
upvoted 6 times
...
...
Damian367
Highly Voted 2 years, 7 months ago
No correct Answer - https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#microsoft-sentinel-automation-contributor
upvoted 6 times
...
ecasjo
Most Recent 7 months, 2 weeks ago
So we agree there is no correct answer? Since you need Logic App Contributor to configure(edit) playbooks.
upvoted 2 times
...
chepeerick
1 year, 1 month ago
Correct option
upvoted 1 times
...
danb67
1 year, 1 month ago
Correct Answer missing. Log App Contributor.
upvoted 5 times
...
evilprime
1 year, 8 months ago
contributor, it doesn't say he needs to create the playbook, just link it.
upvoted 1 times
wheeldj
7 months, 1 week ago
no it doesn't. It says he needs to CONFIGURE playbooks. I'd interpret that as actually creating, editing, updating the playbook rather than just linking it. Logic App Contributor is the correct answer but missing from the list.
upvoted 2 times
...
...
[Removed]
1 year, 9 months ago
Selected Answer: C
admin1 should be assigned the Azure Sentinel Contributor role. This role provides access to the Azure Sentinel workspace and allows the user to perform tasks such as creating incidents, hunting for threats, and managing data connectors. The Automation Operator and Automation Runbook Operator roles are related to Azure Automation, which is not relevant to the current requirements. The Azure Sentinel Responder role is also related to Azure Sentinel, but it has more limited capabilities compared to the Azure Sentinel Contributor role, as it only allows the user to manage incidents and execute response actions.
upvoted 1 times
...
Metasploit
2 years, 1 month ago
Selected Answer: C
Vote C Azure Sentinel Contributor, because it is at least 50% there whereas the rest are not even close. The below link describes that if you were to give someone Azure Sentinel Contributor(50%) and Logic App Contributor(Other 50%) they can create and run playbooks. https://learn.microsoft.com/en-us/azure/sentinel/roles#microsoft-sentinel-roles-permissions-and-allowed-actions
upvoted 4 times
...
king001
2 years, 7 months ago
Requirement is "configure Azure Sentinel playbooks" not just assign to automation rule. So, answer C is correct
upvoted 1 times
Ramye
9 months, 1 week ago
Not Really ... See here https://learn.microsoft.com/en-us/azure/sentinel/roles Microsoft Sentinel Contributor can, in addition to the above, install and update solutions from content hub, create and edit workbooks, analytics rules, and other Microsoft Sentinel resources.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...