A recent data breach stemmed from unauthorized access to an employee's company account with a cloud-based productivity suite. The attacker exploited excessive permissions granted to a third-party OAuth application to collect sensitive information.

Which of the following BEST mitigates inappropriate access and permissions issues?

1. SIEM
2. CASB
3. WAF
4. SOAR

1. Distributed denial of service (DDoS) 
2. Lost productivity 
3. Firewall configuration error 
4. Unauthorized remote access

You are developing an application to ingest and process large volumes of events and data by using Azure Event Hubs.

You must use Azure Active Directory (Azure AD) to authorize requests to Azure Event Hubs resources.

You need to use Azure role-based access control (Azure RBAC) to grant permissions to a security principal at the narrowest possible scope.

Which scope access level should you use?

Select only one answer.

A. consumer group
B. event hub
C. namespace
D. resource group
E. subscription