Microsoft 365 Administrator Expert MS-102 Practice Question
Your organization uses Microsoft 365 E5. You must give an external vendor team permission to review, but not modify, all security incidents in Microsoft Defender XDR and to run searches in the unified audit log in Microsoft Purview. The vendor must have no other security or compliance privileges. Which set of role group assignments meets the requirements?
Incident Responder in Microsoft Defender XDR and eDiscovery Manager in Microsoft Purview
Security Reader in Microsoft Defender XDR and View-Only Audit Logs in Microsoft Purview
Security Operator in Microsoft Defender XDR and Compliance Data Administrator in Microsoft Purview
Security Administrator in Microsoft Defender XDR and Audit Reader in Microsoft Purview
The Security Reader role group in Microsoft Defender XDR provides read-only access to incidents, alerts, and reports without allowing the user to change status or take response actions. In the Microsoft Purview compliance portal, the View-Only Audit Logs role group allows users to run and view audit log searches but prevents them from configuring auditing or performing eDiscovery tasks. Assigning these two role groups meets the read-only requirement across both workloads, whereas the other listed role groups grant additional capabilities (such as changing incident status, configuring policies, or performing eDiscovery) that exceed the requirement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Defender XDR?
Open an interactive chat with Bash
What does the View-Only Audit Logs role in Microsoft Purview allow?
Open an interactive chat with Bash
Why is the Security Reader role better than Security Operator for read-only permissions?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Deploy and manage a Microsoft 365 tenant
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .