Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 3 question 70 discussion

Actual exam question from Microsoft's MS-101

Question #: 70
Topic #: 3

HOTSPOT -
You have a Microsoft Azure Active Directory (Azure AD) tenant named sk180818.onmicrosoft.com. The tenant contains the users shown in the following table.

In Azure Information Protection, you create a label named Label1 as shown in the following exhibit.

Label1 is applied to a file named File1.
You send File1 as an email attachment to User1, User2, User3, and User4.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels

by originalwitness at April 11, 2021, 11:42 p.m.

Comments

Submit Cancel

365admin

Highly Voted 4 years, 2 months ago

Yes- User 2 can modify file1 being co-author but not change access No- User3 cannot print file1 being a reviewer Yes- Gmail users can read files.

upvoted 31 times

Jacques2108

4 years, 2 months ago

I agree except User3, for a reviewer to be able to review a file surely they can print it? If someone has a URL to confirm please post here!

upvoted 1 times

Jacques2108

4 years, 2 months ago

Found it! https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels The fact that a reviewer can "edit content" they will definitely be able to print it. So Answer is: Yes: Co-Author: View, Open, Read; Save; Edit Content, Edit; Copy; View Rights; Change Rights; Allow Macros; Save As, Export; Print; Reply [3]; Reply All [3]; Forward [3]; Full Control Yes: reviewer: View, Open, Read; Save; Edit Content, Edit; View Rights; Reply: Reply All [3]; Forward [3]; Allow Macros [2] Yes: As the guest user is authenticated either internally or externally when accessing data from the tenant

upvoted 16 times

NickAK

4 years, 2 months ago

The document you listed explicitly states that the co-author and co-owner can print but does not say that the reviewer can print. That sounds like a no to me.

upvoted 12 times

Jacques2108

4 years, 1 month ago

Oops! Your right! NickAK So Yes, No, Yes confirmed

upvoted 5 times

...

Load full discussion...

...

lucidgreen

3 years, 11 months ago

According to the link provided, this is correct.

upvoted 2 times

...

Kees1990

Most Recent 2 years, 3 months ago

gmail user can read the file but only with a one time passcode and the office365 website. https://blog.atwork.at/post/Azure-information-protection-user-experience-with-external-users

upvoted 1 times

...

aims123456

2 years, 4 months ago

After a lot of searching, found it.. 3rd would be No as per MS it says The AIP Viewer supports guest organizational accounts in Azure AD, but not personal or Windows Live accounts. https://learn.microsoft.com/en-us/azure/information-protection/known-issues

upvoted 4 times

Jakub2023

2 years, 1 month ago

Thanks for the link! If you read this section of it, then there's a workaround for the issue that you mentioned: https://learn.microsoft.com/en-us/azure/information-protection/known-issues#external-users-and-the-aip-viewer

upvoted 1 times

Jakub2023

2 years, 1 month ago

So that would mean that guest users can open the document after all as far as the question is concerned, YNY.

upvoted 1 times

...

sajlen1414

2 years, 7 months ago

Y N Y https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels 1 - Y - Direct Permissions: Co-Author - see link above 2 - N - Indirect permission: Member -> AuthenticatedUsers -> Viewer - see link above. Notice that "Print" is explicitly listed as usage right in Co-Author and Co-Owner, but is missing from Viewer and Reviewer 3 - Y - Indirect permission: Guest -> AuthenticatedUsers -> Viewer

upvoted 1 times

...

thuba_TD

2 years, 7 months ago

YNY https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels Look at the co-author & co-owner rights they have print included and for reviewer it isn't.dont you think if they could print it would be added?

upvoted 1 times

...

JamesM9

3 years, 3 months ago

Y, N, Y

upvoted 4 times

...

harburn422

3 years, 4 months ago

Yes, No, No Technically User 2 could print it, if they screen shot it and then paste it into paint and printed it. But for this question "The Microsoft Answer" no User 2 cannot print it.

upvoted 2 times

harburn422

3 years, 4 months ago

Actually it should be Yes, No, Yes Guest user - Gmail - If you were sent a protected email, follow the instructions to sign in with your social identity provider (such as Google for a Gmail account) or apply for a one-time passcode. https://docs.microsoft.com/en-us/azure/information-protection/rms-client/clientv2-view-use-files#prompts-for-authentication

upvoted 1 times

...

allesglar

3 years, 6 months ago

Authenticated user is a guest user, therefore 3d question is Yes: Here the info regarding authenticated users: Has an email account that's authenticated by Azure AD or a federated social provider. Is authenticated by a Microsoft account. Uses a one-time passcode for email only.

upvoted 1 times

...

supaman

3 years, 10 months ago

Viewer should not be able to print. I didn't check it. Just common sense as I use Google Drive a lot, read only files can be viewed but can be downloaded or printed. If you can print a file, then you can print it to a pdf format and share out.

upvoted 1 times

...

Doki

3 years, 10 months ago

So basically User3 tries to print, can't... proceeds to open snipping tool, screenshots the mail, and prints it anyhow.

upvoted 4 times

Chris_Rock

3 years, 10 months ago

AIP blocks snipping tool. You should test it it is funny. But you can photograph and print. But not snipping tool that is not allowed on Microsoft platform. even greenshot and other software.... you just can't use it! good security

upvoted 3 times

Arlecchino

2 years, 9 months ago

Anti-screenshots apps are very popular now tbh, it should be standard now.

upvoted 1 times

...

Fcnet

3 years, 10 months ago

Y-N-N answer correct Member: This value indicates an employee of the host organization and a user in the organization's payroll. For example, this user expects to have access to internal-only sites. This user is not considered an external collaborator. Guest accounts are considered ג€outside your organizationג€. ... documents that contain sensitive information and that are shared with guests (external users) won't open for those users.... Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide

upvoted 1 times

...

encxorblood

4 years ago

Y-N-N - Co Author and Co-Owner can print. Viewer and Revier not. User 4 can open the file but as a viewer he can not print. User 3 is an auth User but not Co Author and Co-Owner. https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels

upvoted 1 times

Dodier

3 years, 11 months ago

So Y-N-Y because the question about User4 is if he can read File1

upvoted 4 times

...

AnoniMouse

4 years, 1 month ago

The question is: Is a guest user like in this case the gmail account, an AuthenticatedUser? If yes then this user can view the document. Can someone elaborate?

upvoted 4 times

DiscGolfer

3 years, 7 months ago

Y-N-N - Answer 3 is NO for me - https://docs.microsoft.com/en-us/azure/active-directory/external-identities/user-properties#before-invitation-redemption

upvoted 1 times

...

Chris_Rock

4 years ago

yes the guest users is authenticated as being a guest else it would not be known at all. So as a guest it has the permission to view the document. so this user can view not all Gmail users can. But if they are registered as a guest then yes.

upvoted 2 times

TesterDude

3 years, 11 months ago

This is my assumption too but I can't find any MS documentation stating that

upvoted 1 times

...

HvD

4 years, 1 month ago

How can Azure block printing if you can read/open the file?

upvoted 2 times

...

NikPat3125

4 years, 1 month ago

User 2: Yes User3: No reviewer Can't Print User 4 : NO https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels Viewer permission:- Note: For emails, use Reviewer rather than this permission level to ensure that an email reply is received as an email message rather than an attachment. Reviewer is also required when you send an email to another organization that uses the Outlook client or Outlook web app. Or, for users in your organization that are exempt from using the Azure Rights Management service because you have implemented onboarding controls.

upvoted 2 times

...

scottims

4 years, 1 month ago

Y-N-Y User 4 = yes Existing guests: Permit sharing with external users who have already been added to your Azure AD Existing guests may have joined your Azure AD by accepting a share invitation in the past or by being added as guest users by an administrator in the Azure portal. This option requires guests to authenticate into Microsoft 365 with valid credentials before they can access shared assets. https://blog.netwrix.com/2020/05/26/microsoft-365-guest-users-and-external-access/#:~:text=This%20option%20requires%20guests%20to,to%20collaborate%20with%20external%20users.

upvoted 4 times

...

Dan_Turnbull

4 years, 2 months ago

Only Co Owners can "Change Rights/Permissions" Co Authors can't So I believe it's - No, No, No

upvoted 1 times

Eltooth

4 years, 1 month ago

Co-author can edit file so question 1 asks “modify file” which is the same as editing content. Tricky wording from MS.

upvoted 1 times

...

Load full discussion...