MENU
You have a Microsoft 365 E5 subscription that contains two users named User! and User2. The subscription has a data loss prevention (DLP) policy named Policy 1.
User2 sends an outbound message that generates a false positive for Policy1.
You need to ensure that User1 can download the message that generated the alert The solution must follow the principle of least privilege.
To which role group should you add User1?
Suggested Answer: A
Get Premium SC-401 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
20 comments · newest first
DO
Dona
1 day ago
Yeah, it aligns with the DLP policy.
KE
Keith
6 days ago
eDiscovery Manager feels right for downloading.
IN
India
12 days ago
Security Operator? Not really relevant here.
DO
Dona
17 days ago
Agreed, they need more than just read access.
KE
Keith
22 days ago
Global Reader seems too limited for this task.
IN
India
27 days ago
Data Investigator could work too, but not sure.
DO
Dona
1 month ago
That makes sense. They need access to the message.
KE
Keith
1 month ago
I’m leaning towards eDiscovery Manager.
IN
India
1 month ago
Definitely! Least privilege is key here.
DO
Dona
2 months ago
I think it's about permissions.
KE
Keith
2 months ago
This question is tricky.
IR
Irving
2 months ago
B) Global Reader won't give enough access for this.
RE
Renay
2 months ago
Wait, can User1 really access that message with just that role?
AR
Arthur
2 months ago
Definitely A) Data Investigator! Makes the most sense.
TH
Theron
2 months ago
I think C) eDiscovery Manager could work too.
AN
Annelle
3 months ago
A) Data Investigator is the right choice.
ST
Stefany
3 months ago
I’m leaning towards the Global Reader role, but I’m not confident it allows for downloading messages. I should have reviewed that part more closely.
MI
Mickie
3 months ago
I practiced a similar question where we had to assign roles based on DLP policies, and I think the Security Operator might not give enough access for downloading messages.
ER
Ernie
3 months ago
I'm not entirely sure, but I feel like the Data Investigator role could also be relevant since it deals with investigating DLP alerts.
LO
Loren
3 months ago
I think I remember that the eDiscovery Manager role is related to accessing content for legal purposes, so it might be the right choice here.