Exam MS-102 topic 1 question 95 discussion

The correct answer is D. You can apply sensitivity labels to Microsoft 365 Groups, SharePoint sites, Distribution Groups, and Mail-enabled Security Groups but not regular Security Groups. https://learn.microsoft.com/en-us/purview/sensitivity-labels#what-label-policies-can-do

When publishing sensitivity labels in Microsoft 365 (via Microsoft Purview Information Protection), you can target labels to groups. However, only certain types of groups are supported for publishing sensitivity labels. 🔒 Supported group types for publishing sensitivity labels: Microsoft 365 Groups Security Groups 🚫 Not supported: Distribution Groups Mail-enabled Security Groups ✅ Evaluation of the groups: Group Type Can be used to publish Label1? Group1 Microsoft 365 ✅ Yes Group2 Distribution ❌ No Group3 Mail-enabled security ❌ No Group4 Security ✅ Yes ✅ Final Answer: C. Group1 and Group4 only _______________________________________________________

Answer is D You can publish labels to users but only to groups that have email addresses (Distribution groups, Microsoft 365 groups, and mail-enabled security groups). You can't publish a label to a security group. The group can have assigned or dynamic membership.

'Labels can be published to any specific user or email-enabled security group, distribution group, or Microsoft 365 group (which can have dynamic membership) in Microsoft Entra ID.' https://learn.microsoft.com/en-us/purview/sensitivity-labels

This is good answer. Ihave tested it

What label policies can do After you create your sensitivity labels, you need to publish them to make them available to people and services in your organization. The sensitivity labels can then be applied to Office documents and emails, and other items that support sensitivity labels. Unlike retention labels, which are published to locations such as all Exchange mailboxes, sensitivity labels are published to users or groups. Apps that support sensitivity labels can then display them to those users and groups as applied labels, or as labels that they can apply. When you configure a label policy, you can: Choose which users and groups see the labels. "Labels can be published to any specific user or email-enabled security group, distribution group, or Microsoft 365 group (which can have dynamic membership) in Microsoft Entra ID." Double checked and quoted this. https://learn.microsoft.com/en-us/purview/sensitivity-labels#what-label-policies-can-do

A lot of people in this threat seem to think otherwise, but according to https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels, Sensitivity labels can only be applied to M365 groups. See the troubleshooting section... "The sensitivity label option is only displayed for groups when all of the following conditions are met... 6. The group is a Microsoft 365 group.

The correct answer is E. "When you configure a label policy, you can: Choose which users and groups see the labels. Labels can be published to any specific user or email-enabled security group, distribution group, or Microsoft 365 group (which can have dynamic membership) in Azure AD." https://learn.microsoft.com/en-us/purview/sensitivity-labels

According to the Microsoft Learn article Assign sensitivity labels to groups, you can publish sensitivity labels to groups that are either security groups or Microsoft 365 groups1. Therefore, you can publish Label1 to the following groups in your subscription: You cannot publish Label1 to a distribution group, which is not supported for sensitivity labels1.

This site explicitly says to meet this Condition "The group is a Microsoft 365 group." https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-assign-sensitivity-labels?WT.mc_id=Portal-Microsoft_AAD_IAM The "Group writeback state" oddly includes options Security, Mail Enabled Security and Distribution.

Correct : D You can publish labels to users but only to groups that have email addresses (Distribution groups, Microsoft 365 groups, and mail-enabled security groups). You can't publish a label to a security group. The group can have assigned or dynamic membership.

(A) it is Correct only applied into the Email

Correct

Correct answer is D

Answer D. According to the documentation: "Labels can be published to any specific user or email-enabled security group, distribution group, or Microsoft 365 group (which can have dynamic membership) in Azure AD." https://learn.microsoft.com/en-us/purview/sensitivity-labels