Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
BD correct
Slight confused by this one, this link suggests the answer is B & C: https://docs.microsoft.com/en-us/microsoft-365/security/defender/m365d-action-center?view=o365-worldwide Remediation action: Microsoft Defender for Endpoint remediation (devices) Required roles and permissions: Security Administrator role assigned in either Azure Active Directory (Azure AD) (https://portal.azure.com) or the Microsoft 365 admin center (https://admin.microsoft.com) --- or --- Active remediation actions role assigned in Microsoft Defender for Endpoint
The link says it right there: --- or --- Active remediation actions role assigned in Microsoft Defender for Endpoint Security Administrator has too many additional roles outside of simply approving/rejecting pending actions. This would breach Least Privilege. Read-only permissions don't have access to the MDE portal once RBAC is enabled in MDE. So you have to enable this role for Security Reader to access. Security Reader will provide a read-only view into the policies.