Exam MS-102 topic 1 question 211 discussion

GIVEN ANSWER IS CORRECT YES, NO, YES https://www.examtopics.com/discussions/microsoft/view/102906-exam-ms-101-topic-2-question-127-discussion/

N, N, Y Admin1 does not have access to Content Explorer as they have not been assigned an appropriate admin role to access the tab. https://learn.microsoft.com/en-us/purview/data-classification-content-explorer In order to get access to the content explorer tab, an account must be assigned membership in any one of these roles or role groups. Microsoft 365 role groups Global administrator Compliance administrator Security administrator Compliance data administrator

Yes, Admin1, content viewer, can view contents No, Admin2, secuirty admin and List Viewer, cannot view file contents No, Admin2, List Viewer, cannot view file matadata. so cannot verify lables.

Correct! ChatGPT: Analysis: Admin1 has the Content Explorer Content Viewer role, which explicitly allows viewing the actual contents of items. Answer: Yes ✅ 2. Admin2 can view the contents of File1 by using Content Explorer. Analysis: Admin2 has the Content Explorer List Viewer role, which allows viewing item names and metadata but not the actual contents. This is confirmed by the permissions table. Answer: No ❌ 3. Admin2 can use Content Explorer to verify that Label2 is assigned to Mail1. Analysis: Admin2 has Content Explorer List Viewer and Security Administrator roles. The List Viewer role lets Admin2 view metadata, including the label information (like Label2). This capability is sufficient to check if Label2 is assigned to Mail1. Answer: Yes ✅

NO: Admin1 has the Content Explorer List Viewer and Content Explorer Content Viewer roles, which would normally allow viewing content. However, viewing content also requires explicit access to the Content Explorer tab, which Admin1 does not have through roles like Global Administrator, Compliance Administrator, Security Administrator, or Compliance Data Administrator. NO: Admin2 has the Security Administrator role, which grants access to the Content Explorer tab, and the Content Explorer List Viewer role but lacks the Content Explorer Content Viewer role necessary to view content. YES: Admin2 can access the Content Explorer due to being a Security Administrator. With the Content Explorer List Viewer role, Admin2 can view the labels assigned to items, even though they can’t view the content of the items themselves.

NNY Only these 4 roles can see the Content Explorer tab: Global administrator Compliance administrator Security administrator Compliance data administrator The other 2 roles, Content Viewer and List Viewer, don't let you access Content Explorer tab on their own. They must be added on top of the above 4 roles before you can use them with the content.

Content Explorer Content Viewer View the contents files in Content Explorer. Content Explorer List Viewer View all items in Content Explorer in list format only.

from MS: https://learn.microsoft.com/en-us/purview/data-classification-content-explorer "Membership in these role groups does not allow you to view the list of items in content explorer or to view the contents of the items in content explorer. There are two roles that grant access to content explorer and it is granted using the Microsoft Purview compliance portal: Content Explorer List viewer: Membership in this role group allows you to see each item and its location in list view. The data classification list viewer role has been pre-assigned to this role group. Content Explorer Content viewer: Membership in this role group allows you to view the contents of each item in the list. The data classification content viewer role has been pre-assigned to this role group."