MS-102 · Question #485
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…
The correct answer is B. No. The answer is No. Simply copying the eDiscovery Manager role group creates a new group with the same permissions but does not restrict the geographic scope of searches. To limit eDiscovery searches to mailboxes of users in a specific region (such as the United States)…
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 subscription. From the Security & Compliance admin center, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group. You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States. Solution: From the Security & Compliance admin center, you modify the roles of the US eDiscovery Managers role group. Does this meet the goal?
Options
- AYes
- BNo
How the community answered
(33 responses)- A33% (11)
- B67% (22)
Explanation
The answer is No. Simply copying the eDiscovery Manager role group creates a new group with the same permissions but does not restrict the geographic scope of searches. To limit eDiscovery searches to mailboxes of users in a specific region (such as the United States), administrators must configure Compliance Boundaries using the New-ComplianceBoundary PowerShell cmdlet (via Security & Compliance PowerShell). Compliance Boundaries use compliance security filters to restrict which mailboxes a role group can search. Just creating or copying a role group in the admin center does not implement any geographic restriction - it only controls what actions members can perform, not which mailboxes they can target.
Topics
Community Discussion
No community discussion yet for this question.