QUESTION: 31 Exam Topic: Implement and manage identity and access questions

You have a Microsoft 365 subscription linked to an Azure Active Directory (Azure AD) tenant that contains a user named User1.

You have a Data Subject Request (DSR) case named Case1.
You need to allow User1 to export the results of Case1. The solution must use the principle of least privilege. Which role should you assign to User1 for Case1?

eDiscovery Manager
Security Operator
eDiscovery Administrator
Global Reader

Answer(s): A

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/manage-gdpr-data-subject-requests-with-the-dsr-case-tool?view=o365-worldwide#step-1-assign-ediscovery-permissions-to-potential-case-members

Reveal Solution Next Question

QUESTION: 32 Exam Topic: Implement and manage identity and access questions

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 subscription that contains the users shown in the following table.

You create and enforce an Azure Active Directory (Azure AD) Identity Protection sign-in risk policy that has the following settings:

-Assignments: Include Group1, Exclude Group2
-Conditions: User risk level of Medium and above
-Access: Allow access, Require password change

The users attempt to sign in. The risk level for each user is shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Yes.
User1 is in Group1 which the policy applies to.

Box 2: No
User2 is in Group2 which is excluded from the policy. Box 3: No

User3 is in Group1 which is included in the policy and Group2 which is excluded from the policy. In this case, the exclusion wins so the policy does not apply to User3.

Reveal Solution Next Question

QUESTION: 33 Exam Topic: Implement and manage identity and access questions

You configure several Advanced Threat Protection (ATP) policies in a Microsoft 365 subscription. You need to allow a user named User1 to view ATP reports from the Threat management dashboard. Which role provides User1 with the required role permissions?

Compliance administrator
Security reader
Message center reader
Reports reader

Answer(s): B

Reference:

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/view-reports-for-atp?view=o365-worldwide#what-permissions-are-needed-to-view-the-atp-reports

Reveal Solution Next Question

QUESTION: 34 Exam Topic: Implement and manage identity and access questions

HOTSPOT (Drag and Drop is not supported)
Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory (Azure AD) as shown in the following exhibit.

The synchronization schedule is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.
Hot Area: