MS-102 Question #533: Real Exam Question with Answer & Explanation

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 subscription. From the Security & Compliance admin center, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group. You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States. Solution: From the Azure Active Directory admin center, you create a conditional access policy. Does this meet the goal?

Options

• AYes
• BNo

Explanation

To restrict members of an eDiscovery role group so they can only search content for users in a specific region (United States), you must use Compliance Boundaries in the Microsoft 365 Security & Compliance center - not Azure Active Directory. Compliance Boundaries use search permissions filters to limit the mailboxes, sites, and content locations that eDiscovery managers can search. An Azure AD configuration (such as creating groups or assigning roles in Azure AD) does not establish the content search scope restrictions needed. The correct solution requires running New-ComplianceSecurityFilter in Security & Compliance PowerShell to create a boundary tied to a user attribute (e.g., country/region).

No community discussion yet for this question.