Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 221 discussion

Actual exam question from Microsoft's MS-102

Question #: 221
Topic #: 1

HOTSPOT
-

Your company has a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table.

You create a retention label named Label1 that has the following configurations:

• Retains content for five years
• Automatically deletes all content that is older than five years

You turn on Auto labeling for Label1 by using a policy named Policy1. Policy1 has the following configurations:

• Applies to content that contains the word Merger
• Specifies the OneDrive accounts and SharePoint sites locations

You run the following command.

Set-RetentionCompliancePolicy Policyl -RestrictiveRetention $true -Force

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Casticod at Sept. 7, 2023, 10:27 a.m.

Comments

Submit Cancel

vercracked_007

Highly Voted 1 year, 3 months ago

Correct, can add not remove

upvoted 13 times

BigO76

5 months, 3 weeks ago

answers are correct because..User1 can add Exchange email as a location to Policy1. Yes. User1, as a Compliance Data Administrator, can manage retention policies, including adding locations, even with -RestrictiveRetention set to $true. User2 can remove SharePoint sites from Policy1. No. The -RestrictiveRetention $true setting prevents actions that weaken the policy, such as removing locations, even for a Global Administrator. User2 can add the word "Acquisition" to Policy1. Yes. A Global Administrator has sufficient permissions to modify the policy by adding conditions (e.g., keywords), as this action enhances the policy and does not conflict with -RestrictiveRetention.

upvoted 3 times

...

Casticod

Highly Voted 1 year, 3 months ago

correct Note: the second is no because: Set-RetentionCompliancePolicy Policy1 `"RestrictiveRetention $true https://www.examtopics.com/discussions/microsoft/view/50018-exam-ms-101-topic-3-question-21-discussion/

upvoted 7 times

...

A320

Most Recent 3 weeks, 1 day ago

I think NYY, user1 is just a member of the ''Compliance Data Administrator'' group, ''none'' role, (not a privileged role by itself). User2 is has the Global admin role, he can manage the policy, including modifying locations and conditions.

upvoted 1 times

...

Tomtom11

9 months, 1 week ago

https://learn.microsoft.com/en-us/powershell/module/exchange/set-retentioncompliancepolicy?view=exchange-ps -RestrictiveRetention The RestrictiveRetention parameter specifies whether Preservation Lock is enabled for a retention policy or retention label policy. Valid values are: $true: Preservation Lock is enabled for the policy. No one (including an administrator) can turn off the policy or make it less restrictive. $false: Preservation Lock isn't enabled for the policy. This is the default value. After a policy has been locked, no one can turn off or disable it, or remove content from the policy. And it's not possible to modify or delete content that's subject to the policy during the retention period. The only way that you can modify the retention policy are by adding content to it, or extending its duration. A locked policy can be increased or extended, but it can't be reduced, disabled, or turned of

upvoted 1 times

...

vogs7

10 months, 4 weeks ago

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#compliance-data-administrator I don't think data compliance administrator can modify a policy. NNY

upvoted 4 times

king001

10 months, 1 week ago

N: Compliance Data Admin does not have sufficient privilege. N: You cannot remove location once the preservation lock is in place. Y: You can still add.

upvoted 8 times

...

TonyManero

7 months ago

He CAN manage this Policy, look here: https://learn.microsoft.com/en-us/defender-office-365/scc-permissions?view=o365-worldwide#role-groups-in-microsoft-defender-for-office-365-and-microsoft-purview

upvoted 2 times

...

DiligentSam

1 year, 2 months ago

Correct

upvoted 3 times

...