exam questions

Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 6 question 13 discussion

Actual exam question from Microsoft's SC-400
Question #: 13
Topic #: 6
[All SC-400 Questions]

DRAG DROP
-

You have a Microsoft 365 E5 subscription that contains two users named User1 and User2.

You need to implement insider risk management. The solution must meet the following requirements:

• Ensure that User1 can create insider risk management policies.
• Ensure that User2 can use content captured by using insider risk management policies.
• Follow the principle of least privilege.

To which role group should you add each user? To answer, drag the appropriate role groups to the correct users. Each role group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
[Removed]
Highly Voted 1 year, 4 months ago
User1: Insider Risk Management Admins User2: Insider Risk Management Investigators Investigators can access & view forensic evidence captures and Content Explorer. I believe User2 should be an Investigator. As Analysts and Auditors cannot "use the content captured" and the other roles give more permissions. https://learn.microsoft.com/en-us/purview/insider-risk-management-configure#step-1-required-enable-permissions-for-insider-risk-management
upvoted 9 times
SDiwan
1 year, 1 month ago
correct, analyst cannot see content. Investigator is correct answer.
upvoted 2 times
...
Domza
1 year, 3 months ago
Like it~
upvoted 1 times
...
...
Dools
Most Recent 5 months, 2 weeks ago
User 1 needs admin User 2 needs Investigator Privacy Management Analyst: this role allows the user to investigate policy matches but does not grant permissions to view the file content related to the match. Privacy Management Investigator: this role allows the user to investigate policy matches and view the file content related to the match.
upvoted 1 times
...
palm2816
1 year, 4 months ago
Agree with User1 but not sure for User2 https://learn.microsoft.com/en-us/purview/insider-risk-management-configure#step-1-required-enable-permissions-for-insider-risk-management
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago