Microsoft 365 Administrator Expert MS-102 Practice Question
Your organization uses Microsoft Defender XDR and Microsoft Entra ID. You need to grant several security analysts the ability to investigate incidents, run advanced hunting queries, and take response actions such as isolating devices, but you must prevent them from changing any security settings in the Defender portal. Which built-in role or role group should you assign to meet the requirements?
Security reader role group in Microsoft Defender XDR
Global administrator role in Microsoft Entra ID
Security operator role group in Microsoft Defender XDR
Security administrator role group in Microsoft Defender XDR
The Security operator role group in Microsoft Defender XDR lets users investigate incidents, use advanced hunting, and perform response actions-including device isolation and initiating scans-while blocking access to security settings that could change the organization's configuration. Global administrator and Security administrator can both modify security settings, while Security reader has read-only permissions and cannot take response actions.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Defender XDR?
Open an interactive chat with Bash
What are advanced hunting queries in Microsoft Defender XDR?
Open an interactive chat with Bash
What are the differences between the Security operator, Security reader, and Security administrator role groups in Microsoft Defender XDR?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Deploy and manage a Microsoft 365 tenant
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .