nerdexam
Microsoft

SC-401 · Question #35

You have a Microsoft 365 E5 subscription that contains the users shown in the following table. Which users will Microsoft Purview insider risk management flag as potential high-impact users?

The correct answer is D. User1, User2, User3, and User4. Microsoft Purview insider risk management flags users as high-impact based on their administrative roles, access to sensitive data, and specific employment statuses like resignation.

Manage risks, alerts, and activities

Question

You have a Microsoft 365 E5 subscription that contains the users shown in the following table. Which users will Microsoft Purview insider risk management flag as potential high-impact users?

Exhibit

SC-401 question #35 exhibit

Options

  • AUser1 and User2 only
  • BUser2 and User3 only
  • CUser1, User2, and User3 only
  • DUser1, User2, User3, and User4

How the community answered

(40 responses)
  • A
    13% (5)
  • B
    3% (1)
  • C
    5% (2)
  • D
    80% (32)

Why each option

Microsoft Purview insider risk management flags users as high-impact based on their administrative roles, access to sensitive data, and specific employment statuses like resignation.

AUser1 and User2 only

This is incorrect because User3 (departing employee) and User4 (financial data access) are also considered potential high-impact users.

BUser2 and User3 only

This is incorrect because User1 (Global Administrator) and User4 (financial data access) are also considered potential high-impact users.

CUser1, User2, and User3 only

This is incorrect because User4, who has access to financial data, would also be flagged as a potential high-impact user.

DUser1, User2, User3, and User4Correct

All listed users, including Global Administrators, those with access to sensitive data groups or financial data, and departing employees, are considered potential high-impact users by Microsoft Purview insider risk management due to their elevated permissions, access to critical resources, or specific employment circumstances that pose a higher risk.

Concept tested: Insider risk management high-impact users

Source: https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-policy-indicators

Topics

#Microsoft Purview#Insider Risk Management#High-impact users#Risk detection

Community Discussion

No community discussion yet for this question.

Full SC-401 Practice