It's C, but the cmdlet is different (Execute-AzureADLabelSync). Since you need to enable this functionality first. Otherwise the option to scope a sensitivity label to Groups & Sites is greyed out. See here: https://docs.microsoft.com/en-us/powershell/module/exchange/execute-azureadlabelsync?view=exchange-ps It states: '...Use the Execute-AzureADLabelSync cmdlet to start the synchronization of sensitivity labels into Azure Active Directory. This allows the application of sensitivity labels to Microsoft Teams sites, Microsoft 365 Groups, and SharePoint sites....'

Defiantly D Look at the links. https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide Step 1 says - ollow the instructions from the Azure AD documentation to enable sensitivity label support The link takes you to https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-assign-sensitivity-labels Look at step 5 - Enable the feature "EnableMIPLabels"] = "True" The AzureAdLabelSync cmdlet follows. See troubleshooting #3 and the sentence after #5, You will also need to synchronize your sensitivity labels to Azure AD Select Groups, and then select New group is #2 in the next section AFTER EnableMIPLabels has been enabled. D is the answer.

To be able to apply and view sensitivty labels in Teams, Sharepoint, Outlook you need to enable it. You do this with "$Setting["EnableMIPLabels"] = "True""

Answer = D. [A] Set-SPOSite applies to SharePoint [B] The action of creating a new sensitivity label scoped to Groups & sites will not be successful if [C] Execute-AzureAdLabelSync cmdlet allows the application of sensitivity labels to Microsoft Teams sites, Microsoft 365 Groups, and SharePoint sites and is is required if you were using sensitivity labels before September 2019. [D] EnableMIPLabels set to true is needed when assign sensitivity labels to Microsoft 365 groups in Azure Active Directory. Note that this can now be performed via the Azure Portal as referenced here: https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-assign-sensitivity-labels

D is the correct Answer. Tested

if you follow the guide you will understand the correct answer is D: "If you haven't yet enabled sensitivity labels for containers, do the following set of steps as a one-time procedure: 1. Because this feature uses Azure AD functionality, follow the instructions from the Azure AD documentation to enable sensitivity label support: Assign sensitivity labels to Microsoft 365 groups in Azure Active Directory. 2.You now need to synchronize your sensitivity labels to Azure AD. First, connect to Security & Compliance PowerShell. For example, in a PowerShell session that you run as administrator, sign in with a global administrator account. 3. Then run the following command to ensure your sensitivity labels can be used with Microsoft 365 groups: Execute-AzureAdLabelSync" in https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide

D. Labels need to first be configured to work with Azure AD (which is where MS365 groups live)

It is B. I know everyone is going on about the powershell and they do have a point but please read the very beginning of this link: https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels It says: Microsoft Entra ID supports applying sensitivity labels to Microsoft 365 groups when those labels are published in the Microsoft Purview portal or the Microsoft Purview compliance portal and the labels are configured for groups and sites. Yes, you do need to enable them with powershell but you need to do this first. C is kind of right but it is a different module and D is needed too as you can see in the troubleshooting part of the link I added. I am going with B. Good luck out there, may we all get 890s.

First step is to ensure EnableMIPLabels is enabled and set to True Correct Answer D

Yes it is D.

Be carefore.. Groups and Sites options there in the policy but it is gray-out. you can't select it until you enable labels for containers etc. To enable it, you need to "Execute-AzureAdLabelSync" Then you will be able to apply labels to Groups and sites..

ensure that you can view and apply sensitivity labels to new Microsoft Teams sites. - Answer is C. In order to apply label to Groups & Site, you need to ensure you are able to see this option. So, you need to sync labels to azure. -- C -- https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites "Then run the following command to ensure your sensitivity labels can be used with Microsoft 365 groups:"

Got it: here is the link: https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels#enable-sensitivity-label-support-in-powershell Enjoy :)

Answers is D.

Believe the answer is D as well. This link: https://learn.microsoft.com/en-us/microsoft-365/compliance/migrate-aad-classification-sensitivity-labels?view=o365-worldwide#case-b-tenant-used-sensitivity-labels-for-documents-and-emails States: As soon as admin enables sensitivity label feature on the tenant by setting the tenant flag ‘EnableMIPLabels’ to true, the document and email sensitivity labels in group/site/team create and edit dialog boxes appear.

D. Labels need to first be configured to work with Azure AD (which is where MS365 groups live)

https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide#enable-this-preview-and-synchronize-labels How to enable sensitivity labels for containers and synchronize labels If you haven't yet enabled sensitivity labels for containers, do the following set of steps as a one-time procedure: Because this feature uses Azure AD functionality, follow the instructions from the Azure AD documentation to enable sensitivity label support: Assign sensitivity labels to Microsoft 365 groups in Azure Active Directory. You now need to synchronize your sensitivity labels to Azure AD. First, connect to Security & Compliance PowerShell. For example, in a PowerShell session that you run as administrator, sign in with a global administrator account. Then run the following command to ensure your sensitivity labels can be used with Microsoft 365 groups: PowerShell Copy Execute-AzureAdLabelSync