SC-200 · Question #422
You have two Microsoft Entra tenants named Tenant1 and Tenant2. Each tenant is linked to an Azure subscription. Tenant1 contains a group named Group1. Tenant2 contains a group named Group2. You need…
The correct answer is C. two workspaces and Azure Lighthouse. The requirements demand cross-tenant Sentinel management without guest accounts, while keeping Group2 scoped to Tenant2 only. Two workspaces (one per tenant) with Azure Lighthouse is the right fit: Lighthouse enables Group1 in Tenant1 to manage Tenant2's workspace via delegated…
Question
You have two Microsoft Entra tenants named Tenant1 and Tenant2. Each tenant is linked to an Azure subscription. Tenant1 contains a group named Group1. Tenant2 contains a group named Group2. You need to implement Microsoft Sentinel for each tenant. The solution must meet the following requirements:
- Ensure that Group1 can manage security incidents for Tenant1 and
Tenant2 in a single workspace.
- Ensure that Group2 can manage security incidents only for Tenant2.
- Minimize the use of guest accounts.
- Minimize administrative effort.
- Minimize costs.
What should you include in the solution?
Options
- Aone workspace and Privileged Identity Management (PIM)
- Bone workspace and multiple role-based access control (RBAC) role assignments
- Ctwo workspaces and Azure Lighthouse
- Dtwo workspaces and granular delegated admin privileges (GDAP)
How the community answered
(52 responses)- A2% (1)
- B10% (5)
- C83% (43)
- D6% (3)
Explanation
The requirements demand cross-tenant Sentinel management without guest accounts, while keeping Group2 scoped to Tenant2 only. Two workspaces (one per tenant) with Azure Lighthouse is the right fit: Lighthouse enables Group1 in Tenant1 to manage Tenant2's workspace via delegated access without creating guest accounts in Tenant2. Group2 retains access only to Tenant2's own workspace. Option A/B (one workspace) would require Group2 members to be guests in Tenant1 to access it, violating the 'minimize guest accounts' requirement. GDAP (D) is a partner admin model for MSPs managing customer tenants, not suited for this internal cross-tenant scenario.
Community Discussion
No community discussion yet for this question.