nerdexam
Microsoft

MS-302 · Question #94

Case Study 2 - Litware Overview Existing Environment On-premises Infrastructure The network contains an Active Directory forest named litwareinc.com that contains a child domain for each region. All…

The correct answer is B. For each library, enable sensitivity labeling that uses protection. Scenario: The locally stored content is not classified as confidential and users can email documents to external people Apply Azure Information Protection to protect files in a highly confidential SharePoint Online team Configure Azure Information Protection with a new scoped…

Plan and configure a Microsoft Teams environment

Question

Case Study 2 - Litware Overview Existing Environment On-premises Infrastructure The network contains an Active Directory forest named litwareinc.com that contains a child domain for each region. All domain controllers run Windows Server 2012. The main office sync identities to Microsoft Azure Active Directory (Azure AD) by using Azure AD Connect. All user accounts are created in the on-premises Active Directory and sync to Azure AD. Each office contains the following servers and client computers:

  • A domain controller that runs Windows Server 2012
  • A file server that runs Windows Server 2012
  • Client computers that run Windows 10

Currently, all content created by users is stored locally on file servers. Cloud Infrastructure Litware is moving the content from the file server to Microsoft Office 365. The company purchases 4, 500 Microsoft 365 E5 licenses. Litware uses Microsoft Exchange Online for email. Problem Statements Litware identifies the following issues:

  • Finding content and people within the organization is difficult Users cannot access company

data from outside the corporate network

  • Content recovery is slow because all the content is still on-premises
  • Data security is compromised because users can copy company content to USB drives
  • The locally stored content is not classified as confidential and users can email documents to

external people

  • Users must frequently contact the HR department to find employees within the organization who

have relevant skills

  • Users can delete content indiscriminately and without recourse as they have full control of the

content on the file servers Requirements Business Goals Litware identities the following strategic initiatives to remain competitive:

  • All content must be stored centrally
  • Access to content must be based on the user's
  • Department
  • Security level
  • Physical location
  • Users must be able to work on content offline
  • Users must be able to share content externally
  • Content must be accessible from mobile devices
  • Content classifications must include a physical location
  • Content must be retained and protected based on its type

Litware must adhere to highly confidential regulatory standards that include:

  • The ability to restrict the copying of all content created internally and externally
  • Including accurate time zone reporting in audit trails
  • Users must be able to search for content and people across the entire organization
  • Content classification metadata must adhere to naming conventions specified by the IT

department

  • Users must be able to access content quickly without having to review many pages of search

results to find documents

  • Security rules must be implemented so that user access can be revoked if a user share

confidential content with external users Planned Changes Litware plans to implement the following changes:

  • Move all department content to Microsoft SharePoint Online
  • Move all user content to Microsoft OneDrive for Business Restrict user access based on

location and device Technical Requirements Litware identifies the following technical requirements:

  • All on-premises documents (approximately one million documents) must be migrated to the

SharePoint document library of their respective department

  • Each department must have its own term store group. Stakeholders must be notified when term

sets are moved or deleted

  • All the OneDrive content a user must be retained for a minimum of 180 days after the user has

left the organization

  • All external users must be added explicitly to Office 365 groups to give the users access to

SharePoint team sites

  • Office 365 groups must be used as the primary membership service for Microsoft Yammer,

Teams, and SharePoint

  • A user named Admin1 must be allowed to consume apps in the App Catalog and to add

additional app licenses

  • Viewers must be prevented from printing documents that are stored in a modern site named

Finance

  • Users must be prevented from printing content accessed in OneDrive form iOS and Android

devices

  • Retention, protection, and security policies must be implemented for all content stored online
  • All offices must use the Managed Metadata Service to classify documents uploaded to

SharePoint

  • The Azure Information Protection client must be deployed to all domain-joined computers
  • Searches must show results only when the result set is complete
  • OneDrive must be used to work with documents offline
  • Solutions must use the principle of least privilege whenever possible

You need to recommend a solution for the documents stored in the Finance site. What should you recommend?

Options

  • AEnable Azure Information Protection policy labeling
  • BFor each library, enable sensitivity labeling that uses protection
  • CEnable an Information Rights Management (IRM) policy for the libraries
  • DFrom Settings in the SharePoint admin center, enable Information Rights Management (IRM) for

How the community answered

(58 responses)
  • A
    9% (5)
  • B
    76% (44)
  • C
    12% (7)
  • D
    3% (2)

Explanation

Scenario: The locally stored content is not classified as confidential and users can email documents to external people Apply Azure Information Protection to protect files in a highly confidential SharePoint Online team Configure Azure Information Protection with a new scoped policy and sub-label for protection and permissions of your highly confidential SharePoint Online team site. Sign in to the Office 365 portal with an account that has the Security Administrator or Company Administrator role. For help, see Where to sign in to Office 365. In a separate tab of your browser, go to the Azure portal (https://portal.azure.com). If this is the first time you are configuring Azure Information Protection, see these instructions. In the list pane, click All services, type information, and then click Azure Information Protection. Right-click the Highly Confidential label, and then click Add a sub-label. Type a name for the sub- label in Name and a description of the sub-label in Description. In Set permissions for documents and emails containing this label, click Protect. https://docs.microsoft.com/en-us/office365/securitycompliance/protect-sharepoint-online-files- with-azure-information-protection

Topics

#sensitivity labels#IRM#Azure Information Protection#SharePoint libraries

Community Discussion

No community discussion yet for this question.

Full MS-302 Practice