Exam MS-101 topic 3 question 164 discussion

Tested in Lab, I can publish to Groups, Distribution Lists, Mail-Enabled Security Groups. Regular Security Groups do not appear as an option.

D is correct

"To configure scoped policies that assign additional labels to group members, you can use any type of group in Microsoft Entra ID that has an email address that contains a verified domain for the user's tenant. A group that has an email address is often referred to as a mail-enabled group." https://learn.microsoft.com/en-us/azure/information-protection/prepare#azure-information-protection-requirements-for-group-accounts

whoever said you can deploy this to a distribution group is lost... stop providing false information.

According to MS documentation it's going to be M365 group

voting comment for D

https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide Unlike retention labels, which are published to locations such as all Exchange mailboxes, sensitivity labels are published to users or groups. Apps that support sensitivity labels can then display them to those users and groups as applied labels, or as labels that they can apply. When you configure a label policy, you can: Choose which users and groups see the labels. Labels can be published to any specific user or email-enabled security group, distribution group, or Microsoft 365 group (which can have dynamic membership) in Azure AD.

A is correct. According to the Microsoft documentation, "You can also use sensitivity labels to protect content in the following containers: Microsoft Teams sites, Microsoft 365 groups (formerly Office 365 groups), and SharePoint sites." https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide