Exam MS-100 topic 1 question 23 discussion

Actual exam question from Microsoft's MS-100

Question #: 23
Topic #: 1

You have been tasked with enable Microsoft Azure Information Protection for your company's Microsoft 365 subscription.
You are informed that only the members of a group, named Group1, are able to protect content. To achieve your goal, you plan to run a PowerShell cmdlet.
Which of the following is the cmdlet you should run?

A. The Add-AadrmRoleBaseAdministrator cmdlet.
B. The Set-AadrmDoNotTrackUserGroup cmdlet.
C. The Clear-AadrmSuperUserGroup cmdlet.
D. The Set-AadrmOnboardingControlPolicy cmdlet.

Show Suggested Answer

Suggested Answer: D 🗳️
If you don't want all users to be able to protect documents and emails immediately by using Azure Rights Management, you can configure user onboarding controls by using the Set-AadrmOnboardingControlPolicy
References:
https://docs.microsoft.com/en-us/azure/information-protection/activate-service

by MallonoX_111 at Nov. 26, 2021, 10:03 p.m.

Comments

Submit Cancel

MallonoX_111

Highly Voted 3 years, 7 months ago

It's Set-AipServiceOnboardingControlPolicy now

upvoted 35 times

...

gdunlop

Highly Voted 2 years, 9 months ago

Unlikely to see on exam - This cmdlet from the AADRM module is now deprecated. After July 15, 2020, this cmdlet name will be supported only as an alias to its replacement in the AIPService module. https://docs.microsoft.com/en-us/powershell/module/aadrm/set-aadrmonboardingcontrolpolicy?view=azureipps

upvoted 5 times

...

AsthaAshik

Most Recent 2 years, 4 months ago

https://learn.microsoft.com/en-us/azure/information-protection/activate-service

upvoted 2 times

...

NBemfica

2 years, 4 months ago

Set-AipServiceOnboardingControlPolicy https://docs.microsoft.com/en-us/azure/information-protection/activate-service#configuring-onboarding-controls-for-a-phased-deployment

upvoted 1 times

...

Don123

2 years, 5 months ago

Set-AIPAuthentication -Users Group1

upvoted 2 times

Don123

2 years, 5 months ago

The Add-AadrmRoleBaseAdministrator cmdlet is used to assign roles to users or groups in Azure Information Protection. This cmdlet can be used to assign the role of "Information Protection Administrator" to the Group1. This role allows members of the group to protect content using Azure Information Protection. The Set-AadrmDoNotTrackUserGroup cmdlet sets the user groups that are not tracked by Azure Information Protection.

upvoted 2 times

...

Mthaher

3 years, 1 month ago

- Set-AipServiceOnboardingControlPolicy https://docs.microsoft.com/en-us/azure/information-protection/activate-service#configuring-onboarding-controls-for-a-phased-deployment

upvoted 2 times

...