Exam MS-101 topic 2 question 22 discussion

Actual exam question from Microsoft's MS-101

Question #: 22
Topic #: 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.
Your company purchases a Microsoft 365 subscription.
You need to ensure that User1 is assigned the required role to create file policies and manage alerts in the Defender for Cloud Apps admin center.
Solution: From the Defender for Cloud Apps admin center, you assign the App/instance admin role for all Microsoft Online Services to User1.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
App/instance admin: Has full or read-only permissions to all of the data in Microsoft Defender for Cloud Apps that deals exclusively with the specific app or instance of an app selected.
Reference:
https://docs.microsoft.com/en-us/cloud-app-security/manage-admins

by Ninagalilea at Sept. 17, 2022, 3:11 p.m.

Comments

Submit Cancel

RenegadeOrange

Highly Voted 2 years, 9 months ago

Technically yes that role is able to create policies and manage alerts but onlyl for a specific app, the question does not specify that is has to be for all apps so you could say yes, hopefully the actual exam question has more details. Compliance Data Administrator would be the lowest role that can create policies and manage alerts. (then Compliance Administrator and Security Administrator)

upvoted 5 times

EsamiTopici

2 years, 4 months ago

The question doesn’t specify the app, so no

upvoted 1 times

...

Ninagalilea

Most Recent 2 years, 9 months ago

Antwort: A

upvoted 2 times

...