Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 5 question 5 discussion

Actual exam question from Microsoft's SC-400

Question #: 5
Topic #: 5

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You create an assessment named Assesment1 as shown in the following exhibit.

Which users can update the title of Assessment1, and which users can add User5 to the Compliance Manager Readers role group? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Romeokton at Nov. 25, 2023, 9:15 p.m.

Comments

Submit Cancel

ca7859c

2 months, 2 weeks ago

Modify title Admin1, Admin2, User4 Create assessments To create and modify an assessment, a user must hold a role of Compliance Manager Administration, Compliance Manager Assessor, or Global Administrator. Learn more about roles and permissions. https://learn.microsoft.com/en-us/purview/compliance-manager-assessments#initial-steps-before-creating-assessments

upvoted 1 times

ca7859c

2 months, 2 weeks ago

Admin1 only (global admin) To view the Permissions tab as described in this article, you need to be an admin. Specifically, you need to be assigned the Role Management role, and that role is assigned only to the Organization Management and Purview Administrators role groups by default. The Role Management role also allows you to view, create, and modify role groups. Global admins are automatically added as members of this role group, but you don't see them in the output of the Get-RoleGroupMember cmdlet in Security & Compliance PowerShell. https://learn.microsoft.com/en-us/defender-office-365/scc-permissions#role-groups-in-microsoft-defender-for-office-365-and-microsoft-purview

upvoted 1 times

ca7859c

2 months, 1 week ago

2nd one is Admin1 & Admin2

upvoted 1 times

...

Dools

8 months, 1 week ago

For part two of the question. Answer is Admin 1 only To view the Permissions tab you need to be an admin. Specifically, you need to be assigned the Role Management role, and that role is assigned only to the Organization Management and Purview Administrators role groups by default. The Role Management role also allows you to view, create, and modify role groups. https://learn.microsoft.com/en-us/defender-office-365/scc-permissions#role-groups-in-microsoft-defender-for-office-365-and-microsoft-purview

upvoted 2 times

...

Ruslan23

1 year, 2 months ago

Admin1, Admin2 and User4 only Admin1 and Admin2 only

upvoted 4 times

...

SDiwan

1 year, 4 months ago

There is some ambuiguity in the documentation of MS. https://learn.microsoft.com/en-us/purview/compliance-manager-setup#role-types => says that Compliance Manager Contributor can edit and create, but Compliance Manager Assesor can only "edit but can't create". But https://learn.microsoft.com/en-us/purview/compliance-manager-assessments#create-assessments => this document says "Only users who hold a Global Administrator, Compliance Manager Administration, or Compliance Manager Assessor role can create and modify assessments" . The answers change based on which document you follow.

upvoted 2 times

...

CheMetto

1 year, 4 months ago

Both are correct. romeokton link for the first answer. This is for the role: https://learn.microsoft.com/en-us/purview/purview-compliance-portal-permissions?view=o365-worldwide

upvoted 1 times

...

CharlieGolf

1 year, 4 months ago

Assessment title can only be modified by the compliance admins (Admin2 and User4).

upvoted 1 times

CharlieGolf

1 year, 4 months ago

Correction (I was wrong): Global Admin and Compliance Admin/Manager can edit assessments. https://learn.microsoft.com/en-us/purview/compliance-manager-assessments

upvoted 1 times

...

Domza

1 year, 5 months ago

Wrong answer ~ Please see Romeo link for more info. "The person holding the Global admin role for your organization can set user permissions for Compliance Manager." • Compliance Manager uses a role-based access control (RBAC) permission model. Only users who are assigned a role may access Compliance Manager, and the actions allowed by each user are restricted by role type. with love~

upvoted 1 times

...

Romeokton

1 year, 7 months ago

Here is the link to answers: https://learn.microsoft.com/en-us/purview/compliance-manager-setup#role-types

upvoted 1 times

kingAzure

1 year, 7 months ago

So what is the answer?

upvoted 2 times

...