Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 4 question 50 discussion

Actual exam question from Microsoft's MS-500

Question #: 50
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription that contains the users shown in the following table.

You discover that all the users in the subscription can access Compliance Manager reports.
The Compliance Manager Reader role is not assigned to any users.
You need to recommend a solution to prevent a user named User5 from accessing the Compliance Manager reports.
Solution: You recommend modifying the licenses assigned to User5.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
We need to prevent User5 from accessing the compliance manager reports. Assigning Compliance Manager Reader role to User1 will prevent the User5 from accessing the reports.
Reference:
https://docs.microsoft.com/en-us/office365/securitycompliance/working-with-compliance-manager

by ifex380 at Jan. 3, 2020, 3:48 p.m.

Comments

Submit Cancel

mnak

Highly Voted 4 years, 5 months ago

Just an FYI, while this is correct for when the test was created, it is not correct anymore today. You no longer have to have at least one member in each compliance manager role to disable access to all users. MS finally decided in their infinite wisdom that it was a bad idea to have all your users be able to perform actions in compliance manager.... Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide#permissions-and-role-based-access-control

upvoted 17 times

...

Tom993

Highly Voted 4 years, 6 months ago

Outdated: https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide "Note that there is no longer a default Guest access role. Each user must be assigned a role in order to access and work within Compliance Manager."

upvoted 8 times

...

Rstilekar

Most Recent 3 years, 6 months ago

Answer is correct (NO) but question is Outdated now: https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide OR https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide#permissions-and-role-based-access-control "Note that there is no longer a default Guest access role. Each user must be assigned a role in order to access and work within Compliance Manager."

upvoted 1 times

...

Gamer50

4 years, 3 months ago

Answer is YES. https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#which-licenses-provide-the-rights-for-a-user-to-benefit-from-the-service-6

upvoted 2 times

...

The_Shepherd

4 years, 6 months ago

The given answer is correct :The answer is to assign the compliance manager reader role to user 1. Since no one was assigned this role, means every one have access. So when the role is assigned to User 1, User 5 loses access

upvoted 2 times

...

gills

5 years, 1 month ago

The answer is to assign the compliance manager reader role to user 1. Since no one was assigned this role, means every one have access. So when the role is assigned to User 1, User 5 loses access.

upvoted 1 times

jwkin

5 years ago

Can you provide a link that states that? I cannot find anything about assigning the reader role to prevent other users access.

upvoted 3 times

...

BobInTheMoon

5 years, 4 months ago

If the User5 license is modified (maybe removed) this should prevent User5 from access to the Compliance Manager right? (not tested).

upvoted 1 times

Akc0

4 years, 2 months ago

AFAIK unlicensed users can still be compliance managers and do stuff in compliance/admin portals so answer should be No

upvoted 1 times

...

ifex380

5 years, 5 months ago

This should be a big YES

upvoted 3 times

ifex380

5 years, 4 months ago

sorry. No.. The answer should be assigning the compliance manager reader role to user5

upvoted 5 times

Wallace44

5 years, 4 months ago

but we are trying to prevent user5 from accessing the compliance manager reports. How does assigning him the reader role prevent that?

upvoted 4 times

...

AlistairMarini

5 years ago

Exactly. read the question again. Role and Licenses are different. in the question the proposed solution talks about licenses.

upvoted 3 times

...