You need to provide a user with the ability to view data loss prevention (DLP) alerts in the Microsoft Purview portal. The solution must use the principle of least privilege. Which role should you…

The correct answer is B. Security Reader. The Security Reader role grants read-only access to security features in the Microsoft Purview portal, including the ability to view DLP alerts. It is less privileged than Security Operator (which can also take remediation actions), Compliance Data Administrator, and Compliance…

Manage risks, alerts, and activities

Question

You need to provide a user with the ability to view data loss prevention (DLP) alerts in the Microsoft Purview portal. The solution must use the principle of least privilege. Which role should you assign to the user?

Options

ASecurity Operator
BSecurity Reader
CCompliance Data Administrator
DCompliance Administrator

How the community answered

(61 responses)

A
2% (1)
B
90% (55)
C
3% (2)
D
5% (3)

Explanation

The Security Reader role grants read-only access to security features in the Microsoft Purview portal, including the ability to view DLP alerts. It is less privileged than Security Operator (which can also take remediation actions), Compliance Data Administrator, and Compliance Administrator (which both grant broader management permissions). Since the requirement is only to view alerts-not manage or configure policies-Security Reader is the correct least-privilege choice.

Topics

#Data Loss Prevention (DLP)#Microsoft Purview roles#Principle of Least Privilege#Security Reader

Community Discussion

No community discussion yet for this question.

Full SC-401 Practice