MS-102 Practice Test 41 — 15 Questions

Question 1

Refer to the exhibit. You are configuring an auto-labeling policy in Microsoft Purview. The policy is set to apply the 'Confidential' label to documents that contain a specific sensitive info type. However, when a document is auto-labeled, users report that the footer and header are not applied. The label 'Confidential' itself does not have marking configurations. What is the most likely reason?

Accepted Answer

The marking defaults are defined in the policy but the label does not have markings configured.. Option A is correct because the MarkingDefaults in the policy settings apply to all labels if the label itself does not have markings. However, the exhibit shows MarkingDefaults are defined, but they are part of the policy settings, not the label. The auto-labeling policy applies the label, but the markings are not applied because the label does not have them. Option B is wrong because the marking defaults are for the policy, but they might not be applied during auto-labeling. Option C is wrong because client settings are not relevant for auto-labeling. Option D is wrong because the label is published.

Answer

The label is not published to users.

Answer

The Microsoft 365 Apps client is not configured to apply markings.

Answer

The policy settings override the label settings, causing markings to be ignored.

Question 2

You are a compliance administrator. You need to search for emails that contain trade secrets sent by a specific user in the last month. The search must include all mailboxes. What should you use?

Accepted Answer

Content search in Microsoft Purview.. Content search in Microsoft Purview allows searching across mailboxes for specific keywords and date ranges. Option A is correct. Option B is wrong because eDiscovery (Premium) is for advanced workflows, not basic search. Option C is wrong because audit log search tracks activities, not content. Option D is wrong because DLP reports show policy matches, not content search.

Answer

eDiscovery (Premium) case.

Answer

Data Loss Prevention reports.

Answer

Audit log search.

Question 3

Refer to the exhibit. You run the PowerShell command shown. The output shows no results. The user confirms they downloaded files from SharePoint last week. What is the most likely cause?

Accepted Answer

Audit logging is not enabled for the user.. Audit log search requires audit logging to be enabled and the user must be licensed. Option A is correct because if audit logging is not enabled for the user, no events are recorded. Option B is wrong because Operation is correct. Option C is wrong because RecordType is correct. Option D is wrong because FileDownloaded is a valid operation.

Answer

The UserIds parameter is misspelled.

Answer

The RecordType parameter is incorrect.

Answer

The Operations parameter is incorrect.

Question 4

Your organization uses Microsoft Purview to classify and protect data. You need to create a custom sensitive info type that detects employee IDs formatted as 'EMP-XXXXX' where X is a digit. Which approach should you use?

Accepted Answer

Create a custom sensitive info type using a regular expression.. Option B is correct because you can create a custom sensitive info type using a regular expression pattern. Option A is wrong because the built-in type may not match exactly. Option C is wrong because the keyword dictionary can be used as an additional element, but the pattern is best defined by regex. Option D is wrong because exact data match requires a source of truth, not a pattern.

Answer

Use a keyword dictionary for the pattern.

Answer

Use exact data match (EDM) based classification.

Answer

Use the built-in 'Employee ID' sensitive info type.

Question 5

Your organization uses Microsoft Purview Audit (Standard) for auditing user activity. You receive an alert that a user accessed sensitive files in SharePoint Online. You need to investigate the exact actions performed by the user. Which action should you take?

Accepted Answer

Enable Audit (Premium) licensing for the user and then search the audit log.. Option C is correct because Audit (Standard) only retains audit logs for 90 days and does not include detailed file-level operations like item access. You would need to upgrade to Audit (Premium) to get those details. Option A is incorrect because the Search-UnifiedAuditLog cmdlet works with both editions but may not show item-level details in Standard. Option B is incorrect because the Compliance Manager does not store audit logs. Option D is incorrect because there is no 'Audit Log Search' tab in Purview; the correct tool is the Audit solution.

Answer

Run the Search-UnifiedAuditLog cmdlet in Exchange Online PowerShell.

Answer

Navigate to the Microsoft Purview portal and use the Audit Log Search tab.

Answer

Access Microsoft Purview Compliance Manager and review the user's activity.

Question 6

Your organization needs to ensure that all emails containing credit card numbers are automatically encrypted before being sent to external recipients. Which Microsoft Purview solution should you configure?

Accepted Answer

Configure a DLP policy that uses the 'Encrypt email messages' action.. The requirement is to automatically encrypt emails based on content (credit card numbers). Microsoft Purview Message Encryption can be triggered by a DLP policy that detects sensitive information types. Option B is incorrect because sensitivity labels are manually applied. Option C is incorrect because Data Lifecycle Management handles retention and deletion. Option D is incorrect because Communication Compliance monitors for policy violations, not encryption.

Answer

Create a sensitivity label that applies encryption and auto-labeling.

Answer

Set up a retention policy with encryption.

Answer

Implement a Communication Compliance policy.

Question 7

Refer to the exhibit. You are reviewing a Microsoft Purview Data Lifecycle Management policy. A document labeled 'Personal Data' also contains EU_Deceased_Data. What is the retention outcome for this document?

Accepted Answer

The document is retained for 365 days, then deleted.. The policy has two rules. The first rule retains for 365 days if the sensitivity label is 'Personal Data'. The second rule deletes after 90 days if content contains EU_Deceased_Data. When both conditions are met, Microsoft Purview applies the longer retention period (retain 365 days) because retention takes precedence over deletion. Option A is incorrect because the retain rule applies. Option B is incorrect because the retain rule overrides. Option C is incorrect because the rules are not exclusive; both conditions are evaluated.

Answer

The document is deleted after 90 days.

Answer

The document is retained indefinitely because of conflicting rules.

Answer

The document is deleted immediately because it contains sensitive data.

Question 8

Your organization uses Microsoft Purview Compliance Manager. You need to assign a control to a specific user for implementation. What should you do?

Accepted Answer

Edit the control and assign a new owner.. In Compliance Manager, controls can be assigned to users for implementation and testing. This is done by editing the control details and assigning an owner. Option A is incorrect because DLP policies are not used for assignment. Option B is incorrect because assessments are for scoring, not assignment. Option C is incorrect because roles are not assigned to controls directly.

Answer

Assign the user the Compliance Manager role.

Answer

Create a DLP policy to enforce the control.

Answer

Modify the assessment to include the user.

Question 9

Your organization uses Microsoft 365 E5 licenses. You need to configure retention labels to automatically retain emails related to ongoing litigation for 5 years and then delete them. The labels must be applied based on specific keywords in the email subject. What should you use?

Accepted Answer

Use an auto-apply retention label with a trainable classifier.. Auto-apply retention labels with a trainable classifier can apply labels based on keywords. Option C is correct because trainable classifiers can be configured to match subject keywords. Option A is wrong because retention policies apply to all content in a location, not based on keywords. Option B is wrong because default labels apply to all items in a library or folder. Option D is wrong because sensitivity labels focus on protection, not retention.

Answer

Configure a default retention label on the mailbox.

Answer

Deploy a sensitivity label with auto-labeling for Exchange.

Answer

Create a retention policy applied to Exchange email.

Question 10

Which THREE components are required to implement auto-labeling for sensitivity labels in Microsoft 365?

Accepted Answer

A sensitivity label configured for auto-labeling.. Auto-labeling requires a sensitivity label configured for auto-labeling, a policy that specifies the label and locations, and a sensitive info type or trainable classifier to trigger labeling. Option A is correct because the label must be created first. Option C is correct because the auto-labeling policy defines when and where to apply. Option E is correct because the policy uses sensitive info types or trainable classifiers to detect content. Option B is wrong because DLP policies are separate. Option D is wrong because information barriers are not required.

Answer

A DLP policy for the same sensitive info type.

Answer

An information barrier policy.

Question 11

Your organization is required to retain all financial records for seven years. Which Microsoft Purview solution should you use to enforce this requirement?

Accepted Answer

Microsoft Purview retention policies. Option B is correct because retention policies in Microsoft Purview ensure data is kept for a specified period. Option A is wrong because DLP is for preventing data loss, not retention. Option C is wrong because records management is a broader capability but retention policies are the specific tool. Option D is wrong because audit logs track events, not enforce retention.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Records Management

Answer

Microsoft Purview Audit

Question 12

Your organization uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. Users report that they are unable to share files containing credit card numbers via email. You need to allow sharing with specific business partners while maintaining protection for all other recipients. What should you configure?

Accepted Answer

Configure the DLP policy to allow users to override the action with a business justification.. Option B is correct because DLP policies support overriding with business justification when the policy is configured to allow it. Option A is incorrect because file policies focus on file properties, not content inspection for credit cards. Option C is incorrect because sensitivity labels do not override DLP actions. Option D is incorrect because the DLP policy itself must enable the override, not a separate policy.

Answer

Create a separate DLP policy with lower priority that allows sharing with the partners.

Answer

Assign a custom sensitivity label to emails sent to the partners.

Answer

Configure a file policy in Microsoft Purview Information Protection to exempt the partners.

Question 13

Which THREE components are required to implement Microsoft Purview Data Lifecycle Management for Microsoft 365? (Choose three.)

Accepted Answer

Retention labels. Options A, B, and C are correct because retention labels, policies, and file plan are core components. Option D is incorrect because sensitivity labels are part of Information Protection, not Data Lifecycle Management. Option E is incorrect because DLP is a separate solution.

Answer

Sensitivity labels

Answer

Data loss prevention policies

Question 14

Your organization uses Microsoft Purview Information Protection. You need to ensure that when users manually apply a 'Confidential' label to a document in Word, the document is automatically marked with a footer 'CONFIDENTIAL' and encrypted. What must you configure?

Accepted Answer

Configure the sensitivity label's settings to include the footer and encryption.. Sensitivity labels include settings for marking (footer) and encryption. These are configured in the label itself. Option A is incorrect because DLP policies do not apply markings. Option C is incorrect because auto-labeling is for automatic application, not manual. Option D is incorrect because the sensitivity label policy publishes labels but doesn't define their actions.

Answer

Modify the sensitivity label policy to include the footer.

Answer

Create a DLP rule that applies the footer and encryption.

Answer

Set up auto-labeling to apply the footer and encryption.

Question 15

Which TWO Microsoft Purview solutions can be used to detect and prevent the unauthorized sharing of sensitive information in Microsoft Teams messages?

Accepted Answer

Communication Compliance. DLP policies can scan Teams messages for sensitive content and block sharing. Communication Compliance can monitor messages for policy violations and take action. Sensitivity labels are for classification, not detection. Information Barriers restrict communication between groups. eDiscovery is for investigation after the fact.

Answer

eDiscovery (Premium)

Answer

Sensitivity labels

Answer

Information Barriers

MS-102 Practice Test 41 — 15 Questions

Exhibit

MS-102 Practice Test 41 — 15 Questions

Exhibit