Exam SC-400 topic 1 question 59 discussion

Actual exam question from Microsoft's SC-400

Question #: 59
Topic #: 1

You have a Microsoft 365 E5 tenant that contains a user named User1. User1 is assigned the Compliance Administrator role.

User1 cannot view the regular expression in the IP Address sensitive info type.

You need to ensure that User1 can view the regular expression.

What should you do?

A. Assign User1 the Global Reader role.
B. Assign User1 to the Reviewer role group.
C. Instruct User to use the Test function on the sensitive info type.
D. Create a copy of the IP Address sensitive info type and instruct User1 to edit the copy.

Show Suggested Answer

Suggested Answer: D 🗳️

by Ruslan23 at Feb. 18, 2024, 10:26 a.m.

Comments

Submit Cancel

SDiwan

1 year, 2 months ago

Selected Answer: D

Correct answer is D. Test in lab now. You can only see the regex in edit screen. since this is a in-built SIT, only option is to make a copy and then go to edit screen of that copied SIT.

upvoted 3 times

...

emartiy

1 year, 3 months ago

https://learn.microsoft.com/en-us/purview/sit-customize-a-built-in-sensitive-information-type

upvoted 1 times

...

emartiy

1 year, 3 months ago

Selected Answer: D

What Ruslan23 shared seems correct. Correct selection should be D based on the description.

upvoted 2 times

SDiwan

1 year, 2 months ago

But the question does not say that user1 wants to edit the regular expression. It just says the user1 wants to View.

upvoted 1 times

Ruslan23

1 year, 2 months ago

SDiwan check this link and go to the purple Note: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#global-reader As you can see: Microsoft Purview doesn't support the Global Reader role For the Reviewer role you can only access review sets in eDiscovery (Premium) cases: eDiscovery > Advanced. This is the link: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions?view=o365-worldwide

upvoted 2 times

EM1234

11 months, 3 weeks ago

I agree is it D (to me). I just wanted to comment that in that same link in the paragraph above it says: "Global Reader works with Microsoft 365 admin center, Exchange admin center, SharePoint admin center, Teams admin center, Microsoft 365 Defender portal, Microsoft Purview compliance portal, Azure portal, and Device Management admin center." So be careful, Global Reader DOES work with "Microsoft Purview compliance portal", even if it is stated below in purple that it does not work with "Microsoft Purview". My guess is the purple section is referring to what used to be called "Azure Purview".

upvoted 1 times

...

Ruslan23

1 year, 3 months ago

Selected Answer: D

To ensure that User1 can view the regular expression in the IP Address sensitive info type, you should create a copy of the IP Address sensitive info type and instruct User1 to edit the copy (Option D). Here’s why: The built-in sensitive info types, such as the IP Address type, are predefined by Microsoft and cannot be edited1. However, you can create a copy of a built-in sensitive info type, and then modify the copy2. In the copied sensitive info type, User1 will be able to view and edit the regular expression2. Please note that the Compliance Administrator role does not grant the ability to view or edit the regular expressions of built-in sensitive info types1. The Global Reader role (Option A) and the Reviewer role group (Option B) also do not provide these permissions1. The Test function (Option C) is used to test the effectiveness of a sensitive info type, but it does not allow a user to view or edit the regular expression1. - Copilot -

upvoted 2 times

...