Exam SC-400 topic 1 question 22 discussion

It's C, but the cmdlet is different (Execute-AzureADLabelSync). Since you need to enable this functionality first. Otherwise the option to scope a sensitivity label to Groups & Sites is greyed out. See here: https://docs.microsoft.com/en-us/powershell/module/exchange/execute-azureadlabelsync?view=exchange-ps It states: '...Use the Execute-AzureADLabelSync cmdlet to start the synchronization of sensitivity labels into Azure Active Directory. This allows the application of sensitivity labels to Microsoft Teams sites, Microsoft 365 Groups, and SharePoint sites....'

Defiantly D Look at the links. https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide Step 1 says - ollow the instructions from the Azure AD documentation to enable sensitivity label support The link takes you to https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-assign-sensitivity-labels Look at step 5 - Enable the feature "EnableMIPLabels"] = "True" The AzureAdLabelSync cmdlet follows. See troubleshooting #3 and the sentence after #5, You will also need to synchronize your sensitivity labels to Azure AD Select Groups, and then select New group is #2 in the next section AFTER EnableMIPLabels has been enabled. D is the answer.

The reason why NOT option D, "Configure the EnableMIPLabels Azure Active Directory (Azure AD) setting," is not the first step is because you need to create a new sensitivity label scoped to Groups & sites before you can configure the EnableMIPLabels setting. The sensitivity label must exist and be properly scoped to Groups & sites to ensure that it can be applied to new Microsoft Teams sites Once the sensitivity label is created, you can then proceed to configure the EnableMIPLabels setting in Azure AD to enable the feature and ensure that the labels can be applied to Microsoft Teams sites

Two different Co-pilots and ChatGPT 4o Before sensitivity labels can be applied to Microsoft Teams sites, you need to create and configure sensitivity labels specifically scoped for "Groups & sites." This configuration allows the labels to be applicable to containers like Teams, Microsoft 365 groups, and SharePoint sites. MICROSOFT LEARN After creating the sensitivity label, you must publish it to the necessary users or groups. Additionally, ensure that sensitivity labels are enabled for containers and synchronized with Microsoft Entra ID (formerly Azure Active Directory). This process involves running the Execute-AzureAdLabelSync cmdlet to synchronize the labels. MICROSOFT LEARN By creating and configuring a sensitivity label scoped to "Groups & sites," and ensuring proper synchronization, you enable the application of these labels to new Microsoft Teams sites.

To ensure that you can view and apply sensitivity labels to new Microsoft Teams sites, the correct first step is to: B. Create a new sensitivity label scoped to Groups & sites. D. Configure the EnableMIPLabels Azure Active Directory (Azure AD) setting: This setting is related to Microsoft Information Protection (MIP) integration with Azure AD. However, this setting does not directly affect the ability to apply sensitivity labels to Teams sites. Configuring labels first, as described in option B, is the correct approach. Conclusion: To enable sensitivity labels for Microsoft Teams sites, you must first create a new sensitivity label scoped to Groups & Sites. This ensures the label can be applied to both Microsoft Teams (which is built on Groups) and SharePoint sites (used by Teams for file storage

https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels?tabs=microsoft#sensitivity-labels-arent-available-for-assignment-on-a-group 1st is to enable EnableMIPLabels in AAD templates 2nd is to start sync across Entra ID Execute-AzureAdLabelSync

It is B. I know everyone is going on about the powershell and they do have a point but please read the very beginning of this link: https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels It says: Microsoft Entra ID supports applying sensitivity labels to Microsoft 365 groups when those labels are published in the Microsoft Purview portal or the Microsoft Purview compliance portal and the labels are configured for groups and sites. Yes, you do need to enable them with powershell but you need to do this first. C is kind of right but it is a different module and D is needed too as you can see in the troubleshooting part of the link I added. I am going with B. Good luck out there, may we all get 890s.

First step is to ensure EnableMIPLabels is enabled and set to True Correct Answer D

Yes it is D.

Be carefore.. Groups and Sites options there in the policy but it is gray-out. you can't select it until you enable labels for containers etc. To enable it, you need to "Execute-AzureAdLabelSync" Then you will be able to apply labels to Groups and sites..

ensure that you can view and apply sensitivity labels to new Microsoft Teams sites. - Answer is C. In order to apply label to Groups & Site, you need to ensure you are able to see this option. So, you need to sync labels to azure. -- C -- https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites "Then run the following command to ensure your sensitivity labels can be used with Microsoft 365 groups:"

Got it: here is the link: https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels#enable-sensitivity-label-support-in-powershell Enjoy :)

D is the correct Answer. Tested

Answers is D.

if you follow the guide you will understand the correct answer is D: "If you haven't yet enabled sensitivity labels for containers, do the following set of steps as a one-time procedure: 1. Because this feature uses Azure AD functionality, follow the instructions from the Azure AD documentation to enable sensitivity label support: Assign sensitivity labels to Microsoft 365 groups in Azure Active Directory. 2.You now need to synchronize your sensitivity labels to Azure AD. First, connect to Security & Compliance PowerShell. For example, in a PowerShell session that you run as administrator, sign in with a global administrator account. 3. Then run the following command to ensure your sensitivity labels can be used with Microsoft 365 groups: Execute-AzureAdLabelSync" in https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide

To be able to apply and view sensitivty labels in Teams, Sharepoint, Outlook you need to enable it. You do this with "$Setting["EnableMIPLabels"] = "True""

Believe the answer is D as well. This link: https://learn.microsoft.com/en-us/microsoft-365/compliance/migrate-aad-classification-sensitivity-labels?view=o365-worldwide#case-b-tenant-used-sensitivity-labels-for-documents-and-emails States: As soon as admin enables sensitivity label feature on the tenant by setting the tenant flag ‘EnableMIPLabels’ to true, the document and email sensitivity labels in group/site/team create and edit dialog boxes appear.