Exam SC-401 topic 3 question 10 discussion

You can only create a priority user group from an existing security group — so you still need to do step B first.

B. From the Microsoft Entra admin center, create a security group. Creating a security group in the Microsoft Entra admin center allows you to specifically target the users who manage sensitive data associated with the project. This approach minimizes the impact on users who are not part of the project and reduces administrative effort by enabling you to apply policies only to the relevant group of users. Once the security group is created, you can then proceed to create an insider risk management policy in the Microsoft Purview portal that targets this group.

Copilot: The correct answer is: D. From the Microsoft Purview portal, create a priority user group. Creating a priority user group allows you to focus insider risk management policies on specific users who handle sensitive project data, minimizing the impact on users who are not part of the project. This approach also reduces administrative effort by ensuring that policies apply only to relevant individuals rather than the entire organization. Once the priority user group is set up, you can then create an insider risk management policy tailored to their activities and data sensitivity.