SC-200 · Question #246
You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices. You onboard the devices to Microsoft Defender 365. You need to ensure that you can initiate remote shell connections to…
The correct answer is D. Configure role-based access control (RBAC). Before enabling or using Live Response (the remote shell feature) in Microsoft 365 Defender, role-based access control (RBAC) must be configured to define which users have the permissions required to initiate Live Response sessions. RBAC in Defender for Endpoint controls…
Question
You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices. You onboard the devices to Microsoft Defender 365. You need to ensure that you can initiate remote shell connections to the onboarded devices from the Microsoft 365 Defender portal. What should you do first?
Options
- AModify the permissions for Microsoft 365 Defender.
- BCreate a device group.
- CFrom Advanced features in the Endpoints settings of the Microsoft 365 Defender portal, enable
- DConfigure role-based access control (RBAC).
How the community answered
(38 responses)- A3% (1)
- B16% (6)
- C5% (2)
- D76% (29)
Explanation
Before enabling or using Live Response (the remote shell feature) in Microsoft 365 Defender, role-based access control (RBAC) must be configured to define which users have the permissions required to initiate Live Response sessions. RBAC in Defender for Endpoint controls granular permissions including 'Live response' and 'Live response (advanced)'. Without RBAC configured, there is no permission model in place to govern who can use the feature. Once RBAC is set up with the appropriate roles, you can then enable Live Response in Advanced features (the action described in choice C). RBAC configuration is therefore the required first step.
Topics
Community Discussion
No community discussion yet for this question.