Exam MS-101 topic 3 question 96 discussion

Actual exam question from Microsoft's MS-101

Question #: 96
Topic #: 3

You have a Microsoft 365 E5 tenant that contains a user named User1.
You plan to implement insider risk management.
You need to ensure that User1 can perform the following tasks:
✑ Review alerts.
✑ Manage cases.
✑ Create notice templates.
✑ Review user emails by using Content explorer.
The solution must use the principle of least privilege.
To which role group should you add User1?

A. Insider Risk Management
B. Insider Risk Management Analysts
C. Insider Risk Management Investigators
D. Insider Risk Management Admin

Show Suggested Answer

Suggested Answer: C 🗳️
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-configure?view=o365-worldwide

by Johnnien at Nov. 13, 2021, 10:25 a.m.

Comments

Submit Cancel

MartiFC

Highly Voted 3 years, 6 months ago

I think that is correct. The url that is provided, explain every role Insider Risk Management Investigators ==> Use this group to assign permissions to users that will act as insider risk data investigators. Users in this role group can access to all insider risk management alerts, cases, notices templates, and the Content explorer for all cases.

upvoted 7 times

...

ScottT

Most Recent 3 years, 2 months ago

Answer is correct. Looking at https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-plan?view=o365-worldwide#plan-for-the-review-and-investigation-workflow . There are two possibilities - Insider Risk Management or Insider Risk Management Investigators. With the condition of least privilege, that leaves only Insider Risk Management Investigators with the table showing it has the least permissions.

upvoted 4 times

MigrationEndpoint

3 years, 2 months ago

This is correct.

upvoted 2 times

...

Johnnien

3 years, 6 months ago

Insider Risk Management Investigators Use this group to assign permissions to users that will act as insider risk data investigators. Users in this role group can access to all insider risk management alerts, cases, notices templates, and the Content explorer for all cases.

upvoted 3 times

...