QuestionQ15

Govern and secure Microsoft 365 tenants and workloads

HOTSPOT -

You have a Microsoft 365 E5 tenant containing a Microsoft SharePoint site named Site1. Site1 contains the files listed in the following table.

Question Image

You create a sensitivity label named Sensitivity1 and an auto-label policy with the following configuration:

  • Name: AutoLabel1
  • Label to auto-apply: Sensitivity1
  • Choose locations where you want to apply the label: Site1

The Define content that contains sensitive info settings for AutoLabel1 are shown in the following exhibit.

Question Image

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Yes or No
StatementsYesNo
User2 is prevented from accessing Payroll
User1 must complete multifactor authentication (MFA) before accessing Payroll
User3 must complete multifactor authentication (MFA) before accessing Payroll
Explanation

Conditional Access user and group exclusions override inclusions for a policy. User2 is included by CA2 and is not excluded, so CA2 blocks access to Payroll. User1 is also included by CA2 and is not excluded, so access is blocked rather than granted after MFA. User3 is excluded from CA1 through Group3 and excluded from CA2 through Group1 and Group3, so neither policy imposes MFA.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!