Well, the documentation says "Compliance Administrator role is required to train a classifier.", but I did a test and the Compliance Administrator can create Treinable Classifiers too. So, using the principle of the least privillege, the answer is D.

Correct answer is Global Admin: https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide "the Global admin needs to opt in for the tenant to create custom classifiers. Compliance Administrator role is required to train a classifier"

NEW tenant - Global admin is required to opt in

Since they are asking for what role you need to ENSURE that CUSTOM TRAINABLE CLASSIFIERS can be CREATED I will go for Global admin. Global admin are needed to opt in for the tenant to create custom classifiers. Compliance admin are required to train classifiers "To access classifiers in the UI: the Global admin needs to opt in for the tenant to create custom classifiers. Compliance Administrator role is required to train a classifier."

Who can create trainable classifier? Compliance admin and global admin. Who can enable trainable classifier? Global admin. The questions asks "You need to ensure that custom trainable classifiers can be created in the tenant." . So it the answer is C, global admin need to enable the settings so that compliance admin can create the trainable classifier.

Correct answer is Global Admin: https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide "the Global admin needs to opt in for the tenant to create custom classifiers. Compliance Administrator role is required to train a classifier" Catch is "You have a new Microsoft 365 tenant" in the Question. New tenant need to Opt-in. So Global Administrator is the answer.

C is correct. The key phrase is "can be created". The compliance admin cannot do this, the GA needs to first opt-in AKA allow them to be created. https://learn.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide

https://learn.microsoft.com/en-us/purview/trainable-classifiers-get-started-with#how-to-create-a-trainable-classifier Need Compliance Admin or Security Admin. Compliance is the role with the least privilege of the 2.

As someone who does this for a living, for customers. The answer is D. Compliance Administrator. I'm never given GA access to a company's environment.

Sign in to either the Microsoft Purview portal or the Microsoft Purview compliance portal with either Compliance admin or Security admin role access and navigate to Data loss prevention > Data classification > Classifiers. Choose the Trainable classifiers tab.

valid till 20/5/2024 Pass with good grade I got this question

To perform the configuration and ensure that custom trainable classifiers can be created in the tenant, you should be assigned to the Compliance administrator (Option D) role.

To configure custom trainable classifiers in your new Microsoft 365 tenant, you should be assigned the **Compliance administrator** role. This role provides the necessary permissions to manage compliance features, including trainable classifiers. By having this role, you'll be able to create and configure custom classifiers to enhance data loss prevention (DLP) and other compliance-related tasks within your organization. Remember to assign this role to the appropriate user account to perform the necessary configuration tasks. 🛡️🔍

Principle of the least privilege, also C is correct.

From the phrasing of the question it seems like it's asking what's required to opt in. Typical Microsoft trickery. You need to "ENSURE" that custom trainable classifiers "CAN BE CREATED" in the tenant. To ensure that the classifier can be created the tenant must be opted in. To opt in you must be a global admin. After opting in the creation and tanning of the classifiers can be delegated to "Compliance Administrators"

D. Compliance administrator

Correct, Global admin's include alot of tasks. However Compliance admin is related to the exam. Its as simple as that.