MS-201 Exam - Question 38

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 E5 subscription.

You need to ensure that a user named User1 can review audit reports from the Security & Compliance admin center. User1 must be prevented from tracing messages from the Security & Compliance admin center.

Solution: You assign the Security Administrator role to User1.

Does this meet the goal?

Examice · Accepted Answer

Assigning the Security Administrator role to User1 will not prevent User1 from tracing messages from the Security & Compliance admin center. While the Security Administrator role does allow viewing of audit reports, it also allows conducting message traces. Therefore, assigning this role does not meet the goal of preventing User1 from tracing messages.

Baba65Baba · Answer

To view the reports, Sec Admin role is enough.
However, to perform message trace, you'd have to be an Org Admin or Compliance Admin. That was the catch!

donathon · Answer

https://docs.microsoft.com/en-us/microsoft-365/compliance/reports-in-security-and-compliance?view=o365-worldwide

MS-201 Exam - Question 38

Discussion