Exam MS-101 topic 2 question 94 discussion

Ok now I'm thinking A is actually correct, looking at this article is maps the "Compliance Data Administrator" as an AzureAD role that can ?Manage assessments, templates, and tenant data; assign improvement actions" https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide#set-user-permissions-and-assign-roles

B is correct. Only users who hold a Global Administrator, Compliance Manager Administration, or Compliance Manager Assessor role can create and modify assessments. https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-assessments?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions?view=o365-worldwide

Tested and you can create an assessment. It seems odd as all three answers are correct around this question.

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions?view=o365-worldwide. Compliance Data manager does not have the permissions however Compliance Admin has

Ans is No: https://learn.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center-permissions?view=o365-worldwide

ANS IS B ( no ) Role- Compliance data admin Description - View and edit settings and reports for compliance features. https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions?view=o365-worldwide

yes, The Compliance data admin role is a built-in role in Microsoft 365 that allows users to manage compliance-related data and perform various compliance-related tasks, including creating Compliance Manager assessments. This role provides access to the data and features needed to create and manage assessments, without granting excessive privileges that could compromise the security or compliance of your organization. On the other hand, the Compliance admin role is a higher-level role that includes all the permissions of the Compliance data admin role, as well as additional permissions to manage compliance settings and policies across your organization. While this role would also enable User1 to create Compliance Manager assessments, it would grant additional privileges that may not be necessary for this specific task. Therefore, it is recommended to assign the Compliance data admin role to User1 to ensure that they have the appropriate level of access to create Compliance Manager assessments without compromising the security or compliance of your organization.

Only users who hold a Global Administrator, Compliance Manager Administration, or Compliance Manager Assessor role can create and modify assessments. https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-assessments?view=o365-worldwide

Ok, let's clear this up. Compliance roles which can be added from M365 portal: - Compliance Data administrator - Compliance Administrator Answer is YES.

B Compliance data admin role is not assigned through 365 admin portal!!!

See RenegadeOrange

B. No Compliance Manager Assessments are conducted by Compliance Manager Administrators and Compliance manager Assessors Reference: https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center.md