SC-200 Certification Practice Question #266

Question

You need to assign a role-based access control (RBAC) role to admin1 to meet the Azure Sentinel requirements and the business requirements.
Which role should you assign?

Accepted Answer

Among the four offered roles, only Azure (Microsoft) Sentinel Contributor grants any Sentinel management capability — MS Learn confirms it lets you attach playbooks to analytics/automation rules and create/edit Sentinel resources. The two Automation roles operate on Azure Automation runbooks (not Sentinel), and Sentinel Responder is limited to incident management, so all three are eliminated. Both the Suggested Answer and the unanimous Most Voted (13) pick C. Confidence is capped at 80% because multiple highly-voted commenters correctly note that *editing/configuring* playbooks actually requires Logic App Contributor (playbooks are Logic Apps), and that role is missing from the choices — so C is the "best available," not strictly complete, answer.

More SC-200 practice questions