nerdexam
Microsoft

MS-102 · Question #74

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. Assigning the Exchange Administrator role does not provide comprehensive permissions to manage Microsoft Defender for Office 365 settings and policies for Teams, SharePoint, and OneDrive.

Submitted by khalil_dz· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 E5 subscription. You create an account for a new security administrator named SecAdmin1. You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint, and OneDrive. Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the Exchange Administrator role. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(30 responses)
  • A
    17% (5)
  • B
    83% (25)

Why each option

Assigning the Exchange Administrator role does not provide comprehensive permissions to manage Microsoft Defender for Office 365 settings and policies for Teams, SharePoint, and OneDrive.

AYes

Yes, is incorrect because the Exchange Administrator role's scope is limited to Exchange Online administration and does not encompass the full breadth of Microsoft Defender for Office 365 policies for collaboration workloads like Teams, SharePoint, and OneDrive.

BNoCorrect

No, assigning the Exchange Administrator role primarily grants permissions to manage Exchange Online settings, and while it has some security-related functions for email, it does not provide comprehensive permissions to manage Microsoft Defender for Office 365 settings and policies across Microsoft Teams, SharePoint, and OneDrive.

Concept tested: Microsoft 365 administrative role scope

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#exchange-administrator

Topics

#Microsoft Defender for Office 365#Admin Roles#Role-Based Access Control (RBAC)#Security Administration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-102 Practice