Question 820
At the Goldport financial services firm, an audit investigator receives full data classification and policy administration rights merely to examine one compliance case. Which setting or practice should be reviewed in future?
Explanation
Correct Answer
For the Goldport financial services firm, this maintenance action preserves the fix: review Purview role group membership each audit cycle. It should be revisited as the workload evolves.
Incorrect Answers
Review assigned responsibilities when cloud workloads change is not the primary recurring safeguard for this problem. The team should review Purview role group membership each audit cycle. For the Goldport financial services firm, the direct corrective action is to assign suitable Microsoft Purview role groups and permissions for the investigation task.
This is a maintenance action for a different security or compliance situation, rather than the one that originally failed because compliance tool access should distinguish evidence review from policy administration. For the Goldport financial services firm, the direct corrective action is to assign suitable Microsoft Purview role groups and permissions for the investigation task.
The option would have the team review queries and collection scope before export. For this situation, the preventive control should instead be to review Purview role group membership each audit cycle. For the Goldport financial services firm, the direct corrective action is to assign suitable Microsoft Purview role groups and permissions for the investigation task.