Exam SC-400 topic 1 question 34 discussion

The parent label Confidential is simply a text label with no protection settings, and because it has sublabels, it can't be applied to content. Instead, users must choose Confidential to view the sublabels, and then they can choose a sublabel to apply to content. So first will be NO.

No, since the confidential label is a Parent label and cant be used. No, since User2 are not a member of Group2 which has all the labels available (General is not available in either Confidential or Top Secret) Yes, but only to labels available in Group2 and Group3 (All the labels)

It is not possible to apply label "Confidential" as it has sub labels. these sub labels can only be assigned. Hence the first one is "NO".

1. (YES) The confidential label will be applied to all documents created by user1, because group 1 has policy1 that applies the confidential label by default. 2. (No) User2's groups do not have "General" labels published 3- (No) User3 cannot change the label of documents created by user1 because user3 is not in group1 and consequently does not have access to the files.

No for first option Reference: https://learn.microsoft.com/en-us/purview/apply-sensitivity-label-automatically#considerations-for-label-configurations Don't configure a parent label to be applied automatically or recommended Remember, you can't apply a parent label (a label with sublabels) to content. Make sure that you don't configure a parent label to be auto-applied or recommended in Office apps, and don't select a parent label for an auto-labeling policy. If you do, the parent label won't be applied to content. To use automatic labeling with sublabels, make sure you publish both the parent label and the sublabel. For more information on parent labels and sublabels, see Sublabels (grouping labels).

Answer 1: No. Per MS documentation: "Don't choose a parent label as the default label, or configure a parent label to be automatically applied (or recommended). If you do, the parent label cannot be applied." https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide Answer 2: No. User 2 will not see the General label because it has not been published to a group they belong to. Answer 3: I don't like this question because it doesn't have enough information. User3 can see all of the sensitivity labels that user1 can see, but that doesn't mean that user3 automatically gets write permissions to every document that user1 creates. User3 will only be able to change a sensitivity label set by user1 if they have permissions to modify the item the label is applied to. For this question, let's assume user3 has permissions to modify the item, and then we can go with "Yes".

Yes (https://m365admin.handsontek.net/updated-change-in-display-of-hierarchical-sensitivity-labels/) No Yes

Answer 3 = Yes As member of Group 2, User 3 has access to labels with higher priorities (Top Secret - Low, Medium, Hight) than the labels that User 1 has, thus can replace any label set by User1

Answer 2 = No, Label General is not published for Group 1 & Group 3 of which User2 is member of