MS-102 Practice Test 48 — 15 Questions

Question 1

A compliance officer needs to automatically apply a sensitivity label named 'Confidential' to documents stored in SharePoint Online whenever the documents contain social security numbers. Users must be prevented from removing the label. Which configuration should the officer implement?

Accepted Answer

Create a sensitivity label with auto-labeling and set 'Mark content as mandatory'. Option B is correct because sensitivity labels support auto-labeling based on sensitive info types (e.g., social security numbers) and the 'Mark content as mandatory' setting prevents users from removing the label. This ensures automatic classification and enforced protection, meeting the compliance officer's requirements.

Answer

Create a retention label with auto-labeling based on sensitive info types

Answer

Use Microsoft Information Protection (MIP) unified labeling client to apply labels

Answer

Configure Data Loss Prevention (DLP) policy to apply the label

Question 2

A compliance administrator wants to automatically apply a 'Confidential' sensitivity label to documents that contain tax identification numbers. Which two configurations are required? (Choose two.)

Accepted Answer

Define a sensitive information type for tax IDs. Option A is correct because a sensitive information type (SIT) defines the pattern to detect tax identification numbers (e.g., using regex or keyword lists) in content. Option D is correct because an auto-labeling policy automatically applies the sensitivity label to documents when the SIT is matched, without requiring user intervention. Together, they enable automatic classification based on content inspection.

Answer

Create a sensitivity label with the desired protection settings

Answer

Configure a data loss prevention (DLP) rule

Question 3

A compliance officer needs to automatically detect and apply a sensitivity label to documents in SharePoint Online that contain a custom sensitive information type (e.g., employee ID pattern). The label must be applied automatically, and users must be prompted to provide a justification when attempting to remove the label. Which combination of configurations should the officer implement?

Accepted Answer

Create a sensitivity label with an auto-labeling policy that uses a custom sensitive info type, and configure the label's protection settings to require user justification to remove the label.. Option A is correct because Microsoft Purview sensitivity labels support auto-labeling policies that can automatically apply a label based on custom sensitive information types (e.g., employee ID patterns). Additionally, the label's protection settings include an option to require user justification when removing the label, which meets the compliance officer's requirement for both automatic detection and removal justification.

Answer

Create a retention label and publish it to the site via auto-labeling policy.

Answer

Use a Data Loss Prevention (DLP) policy to apply the label and configure the policy to block removal.

Answer

Deploy the Azure Information Protection scanner to scan SharePoint Online documents.

Question 4

A compliance officer needs to automatically encrypt and apply a 'Do Not Forward' restriction to all outgoing emails sent by the finance department that contain credit card numbers. The solution must work without requiring users to manually apply labels. Which configuration is required?

Accepted Answer

Create an auto-labeling policy for Microsoft Purview Sensitivity Labels that applies a label with encryption and 'Do Not Forward' configured, scoped to the finance department. Option B is correct because Microsoft Purview auto-labeling policies can automatically apply a sensitivity label that includes encryption and a 'Do Not Forward' restriction based on conditions such as sensitive information types (e.g., credit card numbers) and user scope (e.g., finance department). This meets the requirement of automatic enforcement without user intervention, as the label is applied at the time of sending via client-side auto-labeling.

Answer

Create a Data Loss Prevention (DLP) policy with the action 'Encrypt email messages'

Answer

Create a mail flow rule in Exchange Online to apply Rights Management template 'Do Not Forward'

Answer

Create a retention label that encrypts the email

Question 5

A compliance officer wants to automatically apply a retention label to documents that contain SWIFT codes (financial identifiers) when uploaded to SharePoint Online. Which two Microsoft Purview features are required for this configuration? (Choose two.)

Accepted Answer

Trainable classifier. Option B is correct because a trainable classifier is required to identify content containing SWIFT codes based on pattern recognition and machine learning. Option C is correct because an auto-apply retention label policy is the mechanism that automatically assigns the retention label to documents when the classifier detects SWIFT codes in SharePoint Online.

Answer

Sensitivity label

Answer

Data Loss Prevention (DLP) policy

Question 6

A compliance officer needs to retain all documents in a SharePoint Online site for 7 years and then automatically delete them. During the retention period, users must be able to edit the documents but not delete them. Which Microsoft Purview solution should the officer configure?

Accepted Answer

retention policy configured with a retention period of 7 years and an action to delete items automatically. A retention policy in Microsoft Purview can be applied at the site level to enforce a 7-year retention period with automatic deletion, while allowing users to edit documents during that time. The policy prevents deletion by users because the retention lock overrides user permissions, ensuring compliance with the requirement to block deletion but permit edits.

Answer

retention label configured with a retention period and an action to delete after 7 years

Answer

data lifecycle management policy

Answer

An eDiscovery hold

Question 7

A legal hold is required for all emails in a user's mailbox related to a litigation case. The administrator needs to ensure that the mailbox content is preserved even if the user tries to delete emails. Which Microsoft Purview feature should be used?

Accepted Answer

Litigation Hold. Litigation Hold is the correct choice because it is a Microsoft Purview feature specifically designed to preserve all mailbox content, including deleted items and original versions of modified items, for legal or compliance purposes. When enabled, it places the user's entire mailbox on hold, preventing permanent deletion by the user or automated processes, and ensures that all data related to a litigation case is retained indefinitely until the hold is removed.

Answer

eDiscovery (Standard) case hold

Answer

Retention policy

Answer

In-Place Hold

Question 8

A compliance officer needs to ensure that no user can permanently delete a document from a specific SharePoint Online site. The document must be kept for at least 5 years. Which Microsoft Purview solution should the officer configure?

Accepted Answer

B: Retention policy for the site with retention period of 5 years and action set to 'Retain'.. A retention policy with the 'Retain' action ensures that documents in the SharePoint site are preserved for the specified period and cannot be permanently deleted by users or system processes. This meets the compliance requirement of a 5-year minimum retention and prevents permanent deletion, as retained items are moved to the Preservation Hold library.

Answer

A: Sensitivity label with a retention period of 5 years.

Answer

C: DLP policy to prevent deletion of documents.

Answer

D: eDiscovery hold on the site.

Question 9

A compliance officer needs to automatically apply a sensitivity label that encrypts documents in SharePoint Online when the documents contain a custom regex pattern (e.g., employee ID). The labeling must occur automatically without requiring user interaction. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both components.)

Accepted Answer

An auto-labeling policy and a sensitivity label with encryption configured. Option A is correct because an auto-labeling policy in Microsoft Purview can automatically apply sensitivity labels to documents in SharePoint Online based on conditions such as the presence of a custom regex pattern. The sensitivity label must have encryption configured to enforce protection, and the auto-labeling policy triggers the labeling without user interaction.

Answer

Data Loss Prevention (DLP) policy and a sensitivity label

Answer

retention label and an auto-labeling policy

Question 10

A compliance officer needs to ensure that all emails containing payment card information (PCI) are automatically encrypted when sent to external recipients. The encryption should occur without user intervention. Which two features should be configured together? (Choose two.)

Accepted Answer

Data Loss Prevention (DLP) policy with encryption action. Option A is correct because a Data Loss Prevention (DLP) policy in Microsoft Purview can be configured with an encryption action that automatically encrypts emails containing sensitive information, such as payment card information (PCI), when sent to external recipients. This encryption occurs without user intervention, meeting the compliance officer's requirement. The DLP policy uses built-in sensitive information types (e.g., Credit Card Number) to detect PCI and applies rights management protection via Azure Information Protection.

Answer

Microsoft Purview Message Encryption

Answer

Transport rule with encryption

Question 11

A compliance officer needs to ensure that all documents in a SharePoint Online site are retained for 5 years and then automatically deleted. During the retention period, users must be allowed to edit the documents but not delete them. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Create a retention policy with a retention rule for 5 years, configured to retain then delete, and enable the preservation hold setting.. Option A is correct because a retention policy with a 'retain then delete' action meets both requirements: it retains documents for 5 years and then automatically deletes them, while the preservation hold setting prevents users from deleting documents during the retention period. This policy applies at the site level, ensuring all content is covered without requiring manual labeling.

Answer

Create a retention label with the action to retain for 5 years then delete, and apply it to the site via auto-labeling.

Answer

Create a sensitivity label with encryption and set an expiration date for 5 years.

Answer

Place the site on an eDiscovery hold with a custom retention period.

Question 12

A compliance administrator needs to ensure that all documents in a SharePoint library are retained for exactly 7 years and then allow users to manually dispose of them sooner after a review. What should they configure in Microsoft Purview?

Accepted Answer

Create a retention label with a retention period of 7 years and enable disposition review. Option A is correct because the requirement specifies a fixed 7-year retention period followed by user-initiated disposal after a review. A retention label with a retention period of 7 years and disposition review enabled allows content to be retained for exactly 7 years, after which a disposition review triggers a manual approval process for disposal. This matches the need for both mandatory retention and manual disposal after review.

Answer

Create a retention label with a retention period of 7 years and no additional action

Answer

Create a sensitivity label that restricts access

Answer

Create a record label

Question 13

A compliance officer needs to ensure that all emails containing sensitive information (e.g., passport numbers) are automatically encrypted when sent to external recipients. The encryption should be enforced without requiring users to manually select an option. Which Microsoft Purview feature should they configure?

Accepted Answer

Data Loss Prevention (DLP) policy with encryption action. A Data Loss Prevention (DLP) policy with encryption action is correct because it automatically detects sensitive information (e.g., passport numbers) using sensitive info types and enforces encryption via Microsoft Purview Message Encryption (OME) as a rule action. This ensures that when an email containing such data is sent to an external recipient, the email is automatically encrypted without requiring user intervention, meeting the compliance officer's requirement.

Answer

Sensitivity labels with auto-labeling

Answer

Message Encryption (OME) policies

Answer

Communication Compliance

Question 14

A company uses Microsoft Purview Data Lifecycle Management. They have a retention policy that retains all documents in a specific SharePoint Online site for 5 years and then automatically deletes them. Some documents in that site have a retention label that retains them for 7 years and then deletes them. What is the effective retention period for those labeled documents?

Accepted Answer

7 years. When a retention label is applied to a document, it takes precedence over a retention policy at the item level. The label's retention setting (7 years) overrides the site-level policy (5 years), so the effective retention period for the labeled documents is 7 years, after which they are automatically deleted.

Answer

5 years

Answer

The documents are retained indefinitely due to conflict

Answer

The documents are retained for 5 years and then archived

Question 15

A compliance officer needs to ensure that any email sent from the organization that contains personally identifiable information (PII) such as social security numbers is automatically encrypted when the recipient is outside the organization. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Data Loss Prevention (DLP) policy with encryption action. Option B is correct because a Data Loss Prevention (DLP) policy in Microsoft Purview can be configured with an 'Encrypt email messages' action that automatically applies Office 365 Message Encryption (OME) to emails containing sensitive information types (e.g., Social Security Number) when sent to external recipients. This meets the compliance requirement for automatic encryption based on content detection, without requiring user intervention or manual label application.

Answer

Sensitivity labels with auto-labeling

Answer

Office 365 Message Encryption (OME) configuration

Answer

Retention policy and labels