MS-500 Exam - Question 266

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription that contains the users shown in the following table.

You discover that all the users in the subscription can access Compliance Manager reports.

The Compliance Manager Reader role is not assigned to any users.

You need to recommend a solution to prevent a user named User5 from accessing the Compliance Manager reports.

Solution: You recommend modifying the licenses assigned to User5.

Does this meet the goal?

Examice · Accepted Answer

Modifying the licenses assigned to User5 will not directly prevent access to Compliance Manager reports. Access to Compliance Manager is controlled by roles and permissions rather than licenses. To prevent User5 from accessing these reports, you would need to ensure that User5 is not assigned a role within Compliance Manager that grants access to those reports. Since there is no Compliance Manager Reader role assigned to any user, it implies that there is a default access setting that grants access. Modifying licenses wouldn't address this role-based access. Therefore, the recommended solution does not meet the goal.

mnak · Answer

Just an FYI, while this is correct for when the test was created, it is not correct anymore today. You no longer have to have at least one member in each compliance manager role to disable access to all users. MS finally decided in their infinite wisdom that it was a bad idea to have all your users be able to perform actions in compliance manager.... Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide#permissions-and-role-based-access-control

Tom993 · Answer

Outdated: https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide

"Note that there is no longer a default Guest access role. Each user must be assigned a role in order to access and work within Compliance Manager."

ifex380 · Answer

This should be a big YES

The_Shepherd · Answer

The given answer is correct :The answer is to assign the compliance manager reader role to user 1. Since no one was assigned this role, means every one have access. So when the role is assigned to User 1, User 5 loses access

Gamer50 · Answer

Answer is YES. 
https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#which-licenses-provide-the-rights-for-a-user-to-benefit-from-the-service-6

BobInTheMoon · Answer

If the User5 license is modified (maybe removed) this should prevent User5 from access to the Compliance Manager right? (not tested).

gills · Answer

The answer is to assign the compliance manager reader role to user 1. Since no one was assigned this role, means every one have access. So when the role is assigned to User 1, User 5 loses access.

Rstilekar · Answer

Answer is correct (NO) but question is Outdated now: https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide OR https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide#permissions-and-role-based-access-control

"Note that there is no longer a default Guest access role. Each user must be assigned a role in order to access and work within Compliance Manager."

MS-500 Exam - Question 266

Discussion