HOTSPOT -
You have a Microsoft 365 E5 tenant that contains three groups named Group1, Group2, and Group3.
You have the users shown in the following table.
You have the sensitivity labels shown in the following exhibit.
You have the label policies shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide
The parent label Confidential is simply a text label with no protection settings, and because it has sublabels, it can't be applied to content. Instead, users must choose Confidential to view the sublabels, and then they can choose a sublabel to apply to content. So first will be NO.
Agree. "Don't choose a parent label as the default label, or configure a parent label to be automatically applied (or recommended). If you do, the parent label can't be applied." No, No, Yes
No, since the confidential label is a Parent label and cant be used. No, since User2 are not a member of Group2 which has all the labels available (General is not available in either Confidential or Top Secret) Yes, but only to labels available in Group2 and Group3 (All the labels)
Answer 1: No. Per MS documentation: "Don't choose a parent label as the default label, or configure a parent label to be automatically applied (or recommended). If you do, the parent label cannot be applied." https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide Answer 2: No. User 2 will not see the General label because it has not been published to a group they belong to. Answer 3: I don't like this question because it doesn't have enough information. User3 can see all of the sensitivity labels that user1 can see, but that doesn't mean that user3 automatically gets write permissions to every document that user1 creates. User3 will only be able to change a sensitivity label set by user1 if they have permissions to modify the item the label is applied to. For this question, let's assume user3 has permissions to modify the item, and then we can go with "Yes".
No for first option Reference: https://learn.microsoft.com/en-us/purview/apply-sensitivity-label-automatically#considerations-for-label-configurations Don't configure a parent label to be applied automatically or recommended Remember, you can't apply a parent label (a label with sublabels) to content. Make sure that you don't configure a parent label to be auto-applied or recommended in Office apps, and don't select a parent label for an auto-labeling policy. If you do, the parent label won't be applied to content. To use automatic labeling with sublabels, make sure you publish both the parent label and the sublabel. For more information on parent labels and sublabels, see Sublabels (grouping labels).
Answer 3 = Yes As member of Group 2, User 3 has access to labels with higher priorities (Top Secret - Low, Medium, Hight) than the labels that User 1 has, thus can replace any label set by User1
To be honest, I'm not sure but I will opt for YES for the third. I have always thought you need to be owner/co-author of the label to change it, but in the question they does not mention any protection setting....so I would choose YES, because User3 probably can change to "Top Secret" any labels applied by User1. (I guess it is the only option User3 has and probably he can as there no protection on labels mentioned) 1 = YES 2 = NO (User2 is not member of Group2. He can't use General) 3= YES
Answer 2 = No, Label General is not published for Group 1 & Group 3 of which User2 is member of
It is not possible to apply label "Confidential" as it has sub labels. these sub labels can only be assigned. Hence the first one is "NO".
1. (YES) The confidential label will be applied to all documents created by user1, because group 1 has policy1 that applies the confidential label by default. 2. (No) User2's groups do not have "General" labels published 3- (No) User3 cannot change the label of documents created by user1 because user3 is not in group1 and consequently does not have access to the files.
Yes (https://m365admin.handsontek.net/updated-change-in-display-of-hierarchical-sensitivity-labels/) No Yes