Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
1 - Subscription Contributor 2 - Security Admin The Security Admin role can view alerts and apply recommendations, but cannot enable/disable Azure Defender, as this is done at the subscription scope. Who can do this: Subscription Contributor Subscription Owner Apply security recommendations to a resource → Resource Group Owner ❌ Incorrect. Resource Group Owner has full control over the resource group, but it is not the minimum required. The correct and more restricted role is Security Admin, which was created specifically for this.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
1 - Subscription Contributor 2 - Security Admin The Security Admin role can view alerts and apply recommendations, but cannot enable/disable Azure Defender, as this is done at the subscription scope. Who can do this: Subscription Contributor Subscription Owner Apply security recommendations to a resource → Resource Group Owner ❌ Incorrect. Resource Group Owner has full control over the resource group, but it is not the minimum required. The correct and more restricted role is Security Admin, which was created specifically for this.
Contributor and Contributor as per https://learn.microsoft.com/en-us/azure/defender-for-cloud/permissions#roles-and-allowed-actions
Box 1 : Security Admin Box 2 : Depends. If the resources in the subscription are located in ONE rg, then RG Owner role is least privilege. If they are located in multiple subscriptions, then Subscription Contributor is a better choice imho.