You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
You have the core eDiscovery cases shown in the following table.
You need to ensure that Admin3 can create holds in Case1 and Case2. The solution must use the principle of least privilege.
To what should you add Admin3?
A. the Global Administrator role
B. the eDiscovery Manager role group
C. the Compliance Manager Contributors role group
D. the eDiscovery Administrator role group
Show Answer
Correct Answer: D
Explanation: Admin3 must be able to create holds in multiple existing eDiscovery cases. eDiscovery Managers can create holds, but only in cases they create themselves. To manage and place holds across all cases regardless of who created them, Admin3 must be an eDiscovery Administrator. This grants the required capability with less privilege than Global Administrator, satisfying the principle of least privilege.
Question 157
DRAG DROP
-
Your company has two departments named department1 and department2 and a Microsoft 365 E5 subscription.
You need to prevent communication between the users in department1 and the users in department2.
How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Explanation: First, create an organization segment that defines users in department1 using the Department attribute. Then, create an information barrier policy that assigns the Department1 segment and blocks communication with the Department2 segment while setting the policy state to Active.
Question 158
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You have a user named User1. Several users have full access to the mailbox of User1.
Some email messages sent to User1 appear to have been read and deleted before the user viewed them.
When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1.
Solution: You run the Set-AdminAuditlogConfig -AdminAuditLogEnabled $true -AdminAuditLogCmdlets *Mailbox* command.
Does that meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: The command enables **administrator audit logging** for Exchange cmdlets, not **mailbox auditing or sign-in activity**. Blank results for mailbox access indicate mailbox auditing/sign-in auditing isn’t enabled or applicable. To see future access to User1’s mailbox, you must ensure **mailbox auditing is enabled** (for example, Set-OrganizationConfig -AuditDisabled $false or enable per-mailbox auditing) and rely on mailbox audit logs, not AdminAuditLogConfig. Therefore, this solution does not meet the goal.
Question 159
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You have a user named User1. Several users have full access to the mailbox of User1.
Some email messages sent to User1 appear to have been read and deleted before the user viewed them.
When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1.
Solution: You run the Set-AuditConfig -Workload Exchange command.
Does that meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Set-AuditConfig -Workload Exchange configures organization-level auditing, which is already enabled by default and does not control mailbox login auditing. To see future sign-ins by users with Full Access (delegates) to User1’s mailbox, you must enable or adjust mailbox auditing on the mailbox itself (e.g., auditing the Delegate action MailboxLogin via Set-Mailbox). Therefore, this solution does not meet the goal.
Question 160
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You have a user named User1. Several users have full access to the mailbox of User1.
Some email messages sent to User1 appear to have been read and deleted before the user viewed them.
When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1.
Solution: You run the Set-MailboxFolderPermission -Identity "User1" -User
-AccessRights Owner command.
Does that meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Granting mailbox folder permissions (Set-MailboxFolderPermission) does not enable or affect auditing of mailbox sign-ins. To view future sign-ins in the audit log, mailbox auditing/sign-in auditing must be enabled and properly configured in Microsoft Purview/Azure AD. Therefore, this command does not meet the goal.
Question 161
HOTSPOT
-
You have a Microsoft 365 subscription. Auditing is enabled.
A user named User1 is a member of a dynamic security group named Group1.
You discover that User1 is no longer a member of Group1.
You need to search the audit log to identify why User1 was removed from Group1.
Which two activities should you use in the search? To answer, select the appropriate activities in the answer area.
Show Answer
Correct Answer: Updated group
Removed member from group
Explanation: Dynamic group membership changes occur when the group rule or user attributes change. Auditing shows the rule or settings change under "Updated group" and the resulting membership change under "Removed member from group."
Question 162
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription.
You need to identify resumes that are stored in the subscription by using a built-in trainable classifier.
Solution: You create a data loss prevention (DLP) policy.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: The goal is to identify resumes stored in the tenant by using a built-in trainable classifier. While trainable classifiers are supported across Purview features, creating a DLP policy is primarily for preventing or auditing data exfiltration, not for discovering and cataloging content at rest. Identification and discovery of resumes is achieved through features like sensitivity labels with auto-labeling or content classification/explorer, not DLP alone. Therefore, this solution does not meet the goal.
Question 163
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription.
You need to identify resumes that are stored in the subscription by using a built-in trainable classifier.
Solution: You create an auto-labeling policy for a sensitivity label.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: A
Explanation: Built-in trainable classifiers in Microsoft Purview (such as the Resume classifier) are used through policies, most commonly auto-labeling policies for sensitivity labels. By creating an auto-labeling policy and selecting the trainable classifier as the condition, the service can automatically detect and therefore identify resumes stored in the Microsoft 365 subscription. This directly meets the stated goal.
Question 164
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription.
You need to identify resumes that are stored in the subscription by using a built-in trainable classifier.
Solution: You create an auto-labeling policy for a retention label.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Built-in trainable classifiers (such as the Resume classifier) are used with auto-labeling for **sensitivity labels**, not for retention labels. Creating an auto-labeling policy for a retention label does not use a built-in trainable classifier to identify resumes, so the solution does not meet the goal.
Question 165
HOTSPOT
-
You have a Microsoft 365 subscription.
In Microsoft Exchange Online, you configure the mail flow rule shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Recipients who use Gmail:
must sign in to the Office 365 Message Encryption (OME) portal to read messages
Recipients from an external Microsoft 365 subscription:
will have messages decrypted automatically
Explanation: The mail flow rule applies OME encryption to messages sent outside the organization. Non-Microsoft mail providers such as Gmail receive a secure wrapper that requires portal sign-in. External Microsoft 365 recipients using supported Outlook clients can open the message seamlessly with automatic decryption.
$19
Get all 316 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
