ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-400 All Questions

View all questions & answers for the SC-400 exam
Go to Exam

Exam SC-400 topic 2 question 87 discussion

Actual exam question from Microsoft's SC-400
Question #: 87
Topic #: 2
[All SC-400 Questions]

You have a Microsoft 365 E5 subscription that contains two users named User1 and User2. The subscription has a data loss prevention (DLP) policy named Policy1.

User2 sends an outbound message that generates a false positive for Policy1.

You need to ensure that User1 can download the message that generated the alert. The solution must follow the principle of least privilege.

To which role group should you add User1?

  • A. Data Investigator
  • B. Global Reader
  • C. eDiscovery Manager
  • D. Security Operator
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Mr_Big at Jan. 31, 2025, 6:40 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ca7859c
3 days, 9 hours ago
Selected Answer: A
Export mailbox and site content that's returned from searches: Data Investigator eDiscovery Manager Data Investigator has less privileges, so I go with A https://learn.microsoft.com/en-us/defender-office-365/scc-permissions
upvoted 1 times
ca7859c
3 days, 9 hours ago
mailbox or site "content"
upvoted 1 times
...
...
Jideakin
1 month, 2 weeks ago
Selected Answer: A
I believe it is Data Investigator. The Data Investigator has "Export" which I believe is needed to download. eDiscovery Manager has additional roles like Case Management and Hold so that wouldn't follow principle of least privilege
upvoted 2 times
...
Mr_Big
3 months ago
Selected Answer: C
The correctone for this one is eDiscovery Manager (according to Copilot) and it makes sence. The Global Reader does NOT have access to download data found by DLP.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago