SC-200 Certification Practice Question #176

Question

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You configure Microsoft Entra Internet Access.

Which users can manage Microsoft Entra Internet Access?

Accepted Answer

Managing Microsoft Entra Internet Access (a Global Secure Access feature) requires the ability to configure traffic forwarding profiles, security profiles, and remote networks. The MS Learn role-based permissions table grants those capabilities to Global Administrator (User1) and Global Secure Access Administrator (User2). User3 holds Privileged Role Administrator, which manages role assignments — it can grant someone the Global Secure Access Administrator role but cannot itself configure or manage Internet Access. The strongest community comment (a_kto_to, 4 👍) makes exactly this directly-vs-indirectly distinction, and both Suggested Answer and Most Voted are D, so User3 is excluded and the answer is User1 and User2 only.

More SC-200 practice questions