You have a Microsoft 365 E5 subscription. You plan to implement insider risk management for users that manage sensitive data associated with a project. You need to create a protection policy for the…

Question

Options

• AFrom the Microsoft Purview portal, create an insider risk management policy.
• BFrom the Microsoft Entra admin center, create a security group.
• CFrom the Microsoft Entra admin center, create a User risk policy.
• DFrom the Microsoft Purview portal, create a priority user group.

• A
  3% (1)
• B
  81% (26)
• C
  6% (2)
• D
  9% (3)

Explanation

The first step is to create a security group in the Microsoft Entra admin center containing only the project users who manage the sensitive data. When you then create the insider risk management policy in Microsoft Purview, you scope it to that security group-ensuring only those users are monitored, which minimizes impact on users outside the project. This approach also minimizes administrative effort because group membership automatically controls policy scope; adding or removing users from the group updates policy coverage without reconfiguring the policy itself. Creating a priority user group (option D) is for elevated-risk monitoring, not for scoping a policy to a defined project team.

No community discussion yet for this question.