exam questions

Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 3 question 70 discussion

Actual exam question from Microsoft's MS-101
Question #: 70
Topic #: 3
[All MS-101 Questions]

HOTSPOT -
You have a Microsoft Azure Active Directory (Azure AD) tenant named sk180818.onmicrosoft.com. The tenant contains the users shown in the following table.

In Azure Information Protection, you create a label named Label1 as shown in the following exhibit.

Label1 is applied to a file named File1.
You send File1 as an email attachment to User1, User2, User3, and User4.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
365admin
Highly Voted 4 years ago
Yes- User 2 can modify file1 being co-author but not change access No- User3 cannot print file1 being a reviewer Yes- Gmail users can read files.
upvoted 31 times
Jacques2108
4 years ago
I agree except User3, for a reviewer to be able to review a file surely they can print it? If someone has a URL to confirm please post here!
upvoted 1 times
Jacques2108
4 years ago
Found it! https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels The fact that a reviewer can "edit content" they will definitely be able to print it. So Answer is: Yes: Co-Author: View, Open, Read; Save; Edit Content, Edit; Copy; View Rights; Change Rights; Allow Macros; Save As, Export; Print; Reply [3]; Reply All [3]; Forward [3]; Full Control Yes: reviewer: View, Open, Read; Save; Edit Content, Edit; View Rights; Reply: Reply All [3]; Forward [3]; Allow Macros [2] Yes: As the guest user is authenticated either internally or externally when accessing data from the tenant
upvoted 16 times
NickAK
4 years ago
The document you listed explicitly states that the co-author and co-owner can print but does not say that the reviewer can print. That sounds like a no to me.
upvoted 12 times
Jacques2108
4 years ago
Oops! Your right! NickAK So Yes, No, Yes confirmed
upvoted 5 times
...
...
...
...
lucidgreen
3 years, 9 months ago
According to the link provided, this is correct.
upvoted 2 times
...
...
Kees1990
Most Recent 2 years, 1 month ago
gmail user can read the file but only with a one time passcode and the office365 website. https://blog.atwork.at/post/Azure-information-protection-user-experience-with-external-users
upvoted 1 times
...
aims123456
2 years, 3 months ago
After a lot of searching, found it.. 3rd would be No as per MS it says The AIP Viewer supports guest organizational accounts in Azure AD, but not personal or Windows Live accounts. https://learn.microsoft.com/en-us/azure/information-protection/known-issues
upvoted 4 times
Jakub2023
2 years ago
Thanks for the link! If you read this section of it, then there's a workaround for the issue that you mentioned: https://learn.microsoft.com/en-us/azure/information-protection/known-issues#external-users-and-the-aip-viewer
upvoted 1 times
Jakub2023
2 years ago
So that would mean that guest users can open the document after all as far as the question is concerned, YNY.
upvoted 1 times
...
...
...
sajlen1414
2 years, 5 months ago
Y N Y https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels 1 - Y - Direct Permissions: Co-Author - see link above 2 - N - Indirect permission: Member -> AuthenticatedUsers -> Viewer - see link above. Notice that "Print" is explicitly listed as usage right in Co-Author and Co-Owner, but is missing from Viewer and Reviewer 3 - Y - Indirect permission: Guest -> AuthenticatedUsers -> Viewer
upvoted 1 times
...
thuba_TD
2 years, 5 months ago
YNY https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels Look at the co-author & co-owner rights they have print included and for reviewer it isn't.dont you think if they could print it would be added?
upvoted 1 times
...
JamesM9
3 years, 1 month ago
Y, N, Y
upvoted 4 times
...
harburn422
3 years, 2 months ago
Yes, No, No Technically User 2 could print it, if they screen shot it and then paste it into paint and printed it. But for this question "The Microsoft Answer" no User 2 cannot print it.
upvoted 2 times
harburn422
3 years, 2 months ago
Actually it should be Yes, No, Yes Guest user - Gmail - If you were sent a protected email, follow the instructions to sign in with your social identity provider (such as Google for a Gmail account) or apply for a one-time passcode. https://docs.microsoft.com/en-us/azure/information-protection/rms-client/clientv2-view-use-files#prompts-for-authentication
upvoted 1 times
...
...
allesglar
3 years, 5 months ago
Authenticated user is a guest user, therefore 3d question is Yes: Here the info regarding authenticated users: Has an email account that's authenticated by Azure AD or a federated social provider. Is authenticated by a Microsoft account. Uses a one-time passcode for email only.
upvoted 1 times
...
supaman
3 years, 8 months ago
Viewer should not be able to print. I didn't check it. Just common sense as I use Google Drive a lot, read only files can be viewed but can be downloaded or printed. If you can print a file, then you can print it to a pdf format and share out.
upvoted 1 times
...
Doki
3 years, 8 months ago
So basically User3 tries to print, can't... proceeds to open snipping tool, screenshots the mail, and prints it anyhow.
upvoted 4 times
Chris_Rock
3 years, 8 months ago
AIP blocks snipping tool. You should test it it is funny. But you can photograph and print. But not snipping tool that is not allowed on Microsoft platform. even greenshot and other software.... you just can't use it! good security
upvoted 3 times
Arlecchino
2 years, 8 months ago
Anti-screenshots apps are very popular now tbh, it should be standard now.
upvoted 1 times
...
...
...
Fcnet
3 years, 8 months ago
Y-N-N answer correct Member: This value indicates an employee of the host organization and a user in the organization's payroll. For example, this user expects to have access to internal-only sites. This user is not considered an external collaborator. Guest accounts are considered ג€outside your organizationג€. ... documents that contain sensitive information and that are shared with guests (external users) won't open for those users.... Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide
upvoted 1 times
...
encxorblood
3 years, 10 months ago
Y-N-N - Co Author and Co-Owner can print. Viewer and Revier not. User 4 can open the file but as a viewer he can not print. User 3 is an auth User but not Co Author and Co-Owner. https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels
upvoted 1 times
Dodier
3 years, 10 months ago
So Y-N-Y because the question about User4 is if he can read File1
upvoted 4 times
...
...
AnoniMouse
3 years, 12 months ago
The question is: Is a guest user like in this case the gmail account, an AuthenticatedUser? If yes then this user can view the document. Can someone elaborate?
upvoted 4 times
DiscGolfer
3 years, 6 months ago
Y-N-N - Answer 3 is NO for me - https://docs.microsoft.com/en-us/azure/active-directory/external-identities/user-properties#before-invitation-redemption
upvoted 1 times
...
Chris_Rock
3 years, 10 months ago
yes the guest users is authenticated as being a guest else it would not be known at all. So as a guest it has the permission to view the document. so this user can view not all Gmail users can. But if they are registered as a guest then yes.
upvoted 2 times
TesterDude
3 years, 10 months ago
This is my assumption too but I can't find any MS documentation stating that
upvoted 1 times
...
...
...
HvD
3 years, 12 months ago
How can Azure block printing if you can read/open the file?
upvoted 2 times
...
NikPat3125
4 years ago
User 2: Yes User3: No reviewer Can't Print User 4 : NO https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels Viewer permission:- Note: For emails, use Reviewer rather than this permission level to ensure that an email reply is received as an email message rather than an attachment. Reviewer is also required when you send an email to another organization that uses the Outlook client or Outlook web app. Or, for users in your organization that are exempt from using the Azure Rights Management service because you have implemented onboarding controls.
upvoted 2 times
...
scottims
4 years ago
Y-N-Y User 4 = yes Existing guests: Permit sharing with external users who have already been added to your Azure AD Existing guests may have joined your Azure AD by accepting a share invitation in the past or by being added as guest users by an administrator in the Azure portal. This option requires guests to authenticate into Microsoft 365 with valid credentials before they can access shared assets. https://blog.netwrix.com/2020/05/26/microsoft-365-guest-users-and-external-access/#:~:text=This%20option%20requires%20guests%20to,to%20collaborate%20with%20external%20users.
upvoted 4 times
...
Dan_Turnbull
4 years, 1 month ago
Only Co Owners can "Change Rights/Permissions" Co Authors can't So I believe it's - No, No, No
upvoted 1 times
Eltooth
4 years ago
Co-author can edit file so question 1 asks “modify file” which is the same as editing content. Tricky wording from MS.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago