ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 4 question 20 discussion

Actual exam question from Microsoft's SC-200
Question #: 20
Topic #: 4
[All SC-200 Questions]

You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and uses Microsoft Copilot for Security.

You need to configure Copilot for Security role assignments to meet the following requirements:

• Ensure that members of Group1 can run prompts and respond to Microsoft Defender XDR security incidents.
• Ensure that members of Group2 can run prompts.
• Follow the principle of least privilege.

You remove Everyone from the Copilot Contributor role.

Which two actions should you perform next? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A. Assign the Security Operator role to Group1.
  • B. Assign the Copilot Owner role to Group2.
  • C. Assign the Copilot Owner role to Group1
  • D. Assign the Security Operator role to Group2.
  • E. Assign the Copilot Contributor role to Group2.
Show Suggested Answer Hide Answer
Suggested Answer: AE 🗳️
by chiquito at Jan. 26, 2025, 6:55 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Swethag37
Highly Voted 2 months, 3 weeks ago
Selected Answer: AE
Explanation: To follow the principle of least privilege, we must carefully assign roles based on minimum necessary permissions. Requirement Breakdown: Group1 needs to run prompts AND respond to Microsoft Defender XDR security incidents. Solution: Assign the Security Operator role. The Security Operator role allows responding to Microsoft Defender XDR incidents. This role provides incident response privileges, but not full administrative rights. Group2 needs to run prompts ONLY. Solution: Assign the Copilot Contributor role. This role allows running prompts without elevated security permissions.
upvoted 6 times
...
Blasty
Most Recent 2 months ago
Selected Answer: AE
Correct answer is not included imo. It should be A, E, (F): - Assign Security Operator to Group1 (to get access to Defender XDR incident data) - Assign Copilot Contributor to Group1 (to be able to prompt) - Assign Copilot Contributor to Group2 (to be able to prompt) Silly question though, since Group2 doesn't have any rights to access M365 data/Azure data since they only have the Contributor role
upvoted 2 times
...
chiquito
3 months ago
Selected Answer: CE
Answers are correct https://learn.microsoft.com/en-us/copilot/security/authentication#assign-roles
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago