Microsoft 365 Administrator — Question 182

You have a Microsoft 365 E5 subscription.

You create a user named Admin1.

You need to ensure that Admin1 can view Endpoint security policies from the Microsoft Defender portal. The solution must follow the principle of least privilege.

Which Microsoft Entra role should you assign to Admin1?

Answer options

• A. Cloud Device Administrator
• B. Security Reader
• C. Global Reader
• D. Security Administrator
• E. Security Operator

Correct answer: B

Explanation

The correct answer is B, Security Reader, as this role allows the user to view security-related information without granting any additional privileges. The other roles, such as Security Administrator or Security Operator, provide more permissions than necessary, while Global Reader does not specifically grant access to security policies.