Exam MS-900 All Questions

View all questions & answers for the MS-900 exam

Exam MS-900 topic 1 question 214 discussion

Actual exam question from Microsoft's MS-900

Question #: 214
Topic #: 1

You are a Microsoft 365 administrator for a company. Employees use Microsoft Office 365 ProPlus to create documents.
You need to implement document classification and protection by using Microsoft Azure Information Protection.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Add an Azure subscription to your Microsoft 365 tenant
B. Install the Azure Information Protection client
C. Create a custom Azure Information Protection policy with the Confidential label
D. Enable the default Azure Information Protection policy
E. Install the Rights Management Service client

Show Suggested Answer

Suggested Answer: AD 🗳️
Reference:
https://docs.microsoft.com/en-us/azure/information-protection/requirements https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-default

by misterkul at Oct. 15, 2019, 9:11 a.m.

Comments

Submit Cancel

misterkul

Highly Voted 5 years, 3 months ago

Isn't Azure subscription already a part of a Office 365 tenant?

upvoted 11 times

wando5000

2 years, 3 months ago

Its hard to know weather its D or B "To deploy Azure Information Protection, you must have the AIP client installed on any machines where you want to use AIP features." Do you actually need to manually enable the default Azure Information Protection policy?

upvoted 1 times

...

TheVeQaZ

4 years, 2 months ago

I think with O365 you don't have Azure Information Protection integration. You need a AD P1 https://azure.microsoft.com/en-us/pricing/details/active-directory/

upvoted 4 times

...

Faulu

5 years ago

Could be enable Azure subscription https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory

upvoted 2 times

...

Rooks

4 years, 8 months ago

Yes this is very co fusing how this O365 and Azure are implemented and used. With every O365 Subscription you get an Azure Active Directory Service for Authentication/ Authorization purposes but you don’t have full access to Azure services that has all these security and other features and for that you do need to subscribe for Azure subscription. Bottom line O365 and Azure services are two different services. Took me a while to understand all these.

upvoted 12 times

...

NoursBear

Most Recent 10 months ago

so studied this question an hour and am now satisfied with A C

upvoted 1 times

...

NoursBear

10 months ago

so from my research in the case of unified labeling, there is a client which is required but that is for specific scenarios https://learn.microsoft.com/en-us/azure/information-protection/requirements#additional-requirements-per-client

upvoted 1 times

NoursBear

9 months, 3 weeks ago

I am back on this one and now it seems A and D to be correct. Create a custom policy is not required as you can use the default one https://www.youtube.com/watch?v=dS7ou1yx-18&list=PL8wOlV8Hv3o_CSGXCt1I8WKX5_G1aah5d&index=5 It states, as soon you click on Information Protection, the feature is enabled and thus with a default global policy

upvoted 1 times

NoursBear

9 months, 3 weeks ago

Come to think of it a client also needs to be installed: https://www.youtube.com/watch?v=57IjIchL_9c&list=PL8wOlV8Hv3o_CSGXCt1I8WKX5_G1aah5d&index=6 So really 3 from those 5 things need to be done. Maybe I will go with A and B. It's true that the global policy is there by default, once you've clicked on Information Protection the first time.

upvoted 1 times

...

JayLearn2022

1 year, 9 months ago

Answer: A and C Here are some Microsoft documentation links that support the correct answer choices: A. Add an Azure subscription to your Microsoft 365 tenant: "Azure Information Protection requirements": https://docs.microsoft.com/en-us/azure/information-protection/get-started/requirements C. Create a custom Azure Information Protection policy with the Confidential label: "Azure Information Protection policy settings": https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-settings "Azure Information Protection default labels and policies": https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-defaults

upvoted 1 times

JayLearn2022

1 year, 9 months ago

I apologize for the confusion in my previous response. The correct answer according to the website mentioned is A and D. Explanation: To implement document classification and protection by using Microsoft Azure Information Protection, you need to perform the following actions: Step 1: Add an Azure subscription to your Microsoft 365 tenant If your Microsoft 365 tenant does not have an Azure subscription, you need to add one. Step 2: Enable the default Azure Information Protection policy By default, all documents that are labeled with a sensitivity label are protected by using the default Azure Information Protection policy.

upvoted 3 times

...

manschadow

2 years, 1 month ago

This is the same question as question 33. I think the answer of both of these questions should be install an AIP client. There is no need to enable a policy. By default, the Azure Information Protection unified labeling client protects all file types, and the scanner from the client protects only Office file types and PDF files. (https://learn.microsoft.com/en-us/azure/information-protection/rms-client/clientv2-admin-guide-customizations)

upvoted 1 times

...

syu31svc

3 years, 7 months ago

Links support A and D as the answers

upvoted 3 times

...

Gerardo1971

3 years, 9 months ago

Correct A,D

upvoted 1 times

...

Rezerestibeiro27

3 years, 9 months ago

Looks like AD is correct

upvoted 1 times

...

TMW

3 years, 9 months ago

you need to either purchase the subscription, or purchase a plan that includes it: https://docs.microsoft.com/en-us/azure/information-protection/requirements%20?source=docs You will need at least a P1 plan to perform this manually, or the P2 plan to have it automated: https://azure.microsoft.com/en-us/pricing/details/information-protection/ You will need to enable the AIP policy: https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-default

upvoted 2 times

...

amymay101

4 years, 2 months ago

I think this is A and B as you need to install the AIP client on the device as well

upvoted 2 times

...

knoopix

5 years, 1 month ago

No need to Install the Azure Information Protection client?

upvoted 3 times

AppleJuice

4 years, 11 months ago

Install the Azure Information Protection client (AzInfoProtection) if you need features that aren't available in the unified labeling client.

upvoted 1 times

...