MS-102 Practice Test 49 — 15 Questions

Question 1

A compliance officer needs to automatically apply a sensitivity label that encrypts documents in SharePoint Online when they contain credit card numbers. The solution must not require manual user action. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both required components.)

Accepted Answer

Sensitivity labels and auto-labeling policies. Option A is correct because sensitivity labels define the encryption and protection settings for content, while auto-labeling policies automatically apply those labels to documents in SharePoint Online when they match sensitive information types like credit card numbers, without requiring manual user action. Together, they enable automated, policy-based classification and protection based on content inspection.

Answer

Sensitivity labels and retention policies

Answer

Auto-labeling policies and communication compliance policies

Question 2

A compliance officer needs to prevent users from sharing protected health information (PHI) with external users in Microsoft Teams chat messages. When a user attempts to send a message containing a known PHI data type (e.g., medical record numbers), the message should be blocked and the sender should see a policy tip. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Data Loss Prevention (DLP) policy for Teams. Option B is correct because a Data Loss Prevention (DLP) policy for Microsoft Teams can be configured to detect and block sensitive information types, such as medical record numbers (a PHI data type), in chat messages. When a match occurs, the policy can block the message and display a policy tip to the sender, meeting the compliance officer's requirement.

Answer

Communication compliance policy

Answer

Sensitivity labels applied to Teams

Answer

Information barriers

Question 3

A compliance officer needs to retain all documents in a SharePoint Online site associated with the Finance department for 10 years, after which the documents must be automatically deleted. During the retention period, users must be allowed to edit the documents but not delete them. Which Microsoft Purview solution should the officer configure?

Accepted Answer

retention policy with a retention period of 10 years and an action to delete at the end of the period. A retention policy can be applied to a SharePoint site to enforce a 10-year retention period with a deletion action at the end, while allowing users to edit documents during that period. This meets the compliance requirement because retention policies preserve content from deletion by users, but still permit editing. The 'delete at end of retention period' action ensures automatic removal after 10 years.

Answer

retention label auto-applied to all documents in the site

Answer

Litigation hold on the site

Answer

Data Loss Prevention (DLP) policy with a retention action

Question 4

A compliance officer wants to automatically apply a 'Confidential' sensitivity label to documents in SharePoint Online that contain credit card numbers. The label should be applied when the documents are created or modified. Which Microsoft Purview feature should be configured?

Accepted Answer

Create an auto-labeling policy for sensitivity labels. Auto-labeling policies for sensitivity labels in Microsoft Purview can automatically apply a sensitivity label to documents in SharePoint Online based on sensitive information types, such as credit card numbers. This policy scans documents when they are created or modified and applies the label without user intervention, meeting the compliance officer's requirement.

Answer

Create a retention label policy

Answer

Create a Data Loss Prevention (DLP) policy

Answer

Configure a default sensitivity label

Question 5

A global administrator at Fabrikam Inc. plans to implement Microsoft Purview to manage compliance for sensitive information. The solution must include the ability to discover, classify, and protect sensitive data across Microsoft 365 services. Which three of the following should the administrator configure? (Choose three.)

Accepted Answer

Configure a trainable classifier to identify and label content that matches specific organizational patterns, such as legal contracts.. Creating a sensitive information type is correct because it allows the administrator to define custom patterns (e.g., employee IDs) that Microsoft Purview can use to discover and classify sensitive data across Microsoft 365 services. This is a foundational step for building compliance policies tailored to the organization's specific data.

Answer

Enable Microsoft Purview Insider Risk Management to scan and label all historical email data.

Answer

Deploy Microsoft Purview eDiscovery to automatically classify all content in Microsoft Teams chats.

Answer

Set up a data loss prevention (DLP) policy to block external sharing of files labeled as 'Highly Confidential'.

Question 6

You are the Microsoft 365 administrator for Contoso Ltd. The compliance team needs to implement data lifecycle management and records management using Microsoft Purview. Which three of the following actions should you take to meet these requirements? (Choose three.)

Accepted Answer

Configure a file plan for records management to define retention schedules and disposal reviews.. Retention labels that automatically apply a retention policy based on sensitive information types (like PII) allow you to implement data lifecycle management by automatically classifying and retaining or deleting content without user intervention. This meets the compliance team's requirement for automated lifecycle management.

Answer

Enable audit logging to automatically enforce retention periods for all Microsoft 365 workloads.

Answer

Deploy Microsoft Purview Compliance Manager to automate the deletion of stale data in Exchange Online.

Answer

Use data loss prevention (DLP) policies to automatically delete emails containing credit card numbers after 30 days.

Question 7

A company must ensure that all outgoing emails containing credit card numbers are blocked from being sent to external recipients. When a user attempts to send such an email, it should be blocked immediately, and the user should see a policy tip explaining the rule. Which Microsoft Purview solution should the administrator configure?

Accepted Answer

Data Loss Prevention (DLP) policy. A Data Loss Prevention (DLP) policy is the correct solution because it is specifically designed to detect sensitive information, such as credit card numbers, in transit (email) and enforce real-time actions like blocking the message and displaying a policy tip to the user. DLP policies in Microsoft Purview can be configured with conditions that match credit card number patterns using built-in sensitive info types, and the action 'Block messages' with a policy tip notification is available for Exchange Online mail flow. This ensures immediate blocking and user notification without requiring any manual labeling or classification.

Answer

Sensitivity labels

Answer

Retention labels

Answer

Communication compliance

Question 8

A compliance administrator needs to automatically apply a retention label to documents in a SharePoint Online site that contain the keyword 'Project Alpha'. The label should retain the documents for 5 years and then delete them. Which two Microsoft Purview features must be configured to achieve this? (Choose two.)

Accepted Answer

Auto-labeling policy for SharePoint Online. An auto-labeling policy for SharePoint Online (option B) is required because it can automatically apply a retention label to documents based on conditions such as the presence of specific keywords. The sensitive info type with a keyword dictionary (option D) defines the condition by creating a custom sensitive information type that matches the exact phrase 'Project Alpha', which the auto-labeling policy then uses to trigger the label application.

Answer

Trainable classifiers

Answer

Document Fingerprinting

Question 9

A compliance officer needs to automatically identify and label content that is conceptually similar to existing sensitive documents, such as internal strategy memos or proprietary technical specifications, without relying on explicit keywords or recognized sensitive information types. Which Microsoft Purview solution should the officer use to achieve this?

Accepted Answer

trainable classifier. A trainable classifier uses machine learning to identify content based on patterns and context learned from sample documents, making it ideal for recognizing conceptually similar content without relying on explicit keywords or predefined sensitive information types. This allows the compliance officer to automatically label internal strategy memos or proprietary technical specifications that share conceptual similarity with existing sensitive documents.

Answer

sensitive information type

Answer

An auto-labeling policy with a retention label

Answer

Data Loss Prevention (DLP) policy that blocks sharing

Question 10

A compliance officer needs to automatically classify documents in SharePoint Online that contain credit card numbers. The classification should apply a label that restricts access and adds a header. Which two Microsoft Purview features must be configured? (Choose two.)

Accepted Answer

Sensitivity labels. Sensitivity labels are correct because they are the Microsoft Purview feature that applies classification markings (such as headers and footers) and encryption or access restrictions to documents. For this scenario, a sensitivity label must be configured to enforce the required header and access restrictions on content containing credit card numbers.

Answer

Retention labels

Answer

Data Loss Prevention (DLP) policies

Question 11

A compliance administrator needs to preserve all documents in a SharePoint Online site that were created before a specific date for a legal hold. The hold should prevent any modification or deletion of those documents. What should the administrator configure?

Accepted Answer

eDiscovery hold. An eDiscovery hold (also known as a litigation hold) preserves all content in a SharePoint Online site by preventing modification or deletion of documents that match the hold criteria, including those created before a specific date. This hold applies at the site level and ensures that even if users edit or delete documents, the original versions are retained in the Preservation Hold library. It is the correct mechanism for legal holds that require immutable preservation of existing documents.

Answer

Retention label applied automatically

Answer

Data loss prevention policy

Answer

Sensitivity label with encryption

Question 12

A compliance officer needs to monitor employee communications across Microsoft Teams and Outlook for potential insider trading, using predefined policies. The solution must detect keywords like 'insider tip' and 'stock' and allow designated reviewers to take action. Which Microsoft Purview solution should the officer use?

Accepted Answer

Communication Compliance. Communication Compliance is the correct Microsoft Purview solution because it is specifically designed to detect sensitive keywords (e.g., 'insider tip' and 'stock') in Microsoft Teams chats, channel messages, and Outlook emails using predefined or customizable policies. It enables designated reviewers to investigate and take remediation actions such as removing messages or escalating for legal review, directly addressing the insider trading monitoring requirement.

Answer

Data Loss Prevention

Answer

eDiscovery (Premium)

Answer

Records Management

Question 13

A compliance officer needs to ensure that all documents containing a custom sensitive info type (Employee ID with pattern EMP-####) are automatically labeled with a retention label that retains the documents for 3 years. Which two Microsoft Purview components must be configured? (Choose two.)

Accepted Answer

retention label. A retention label is required to specify the retention period (3 years) for the documents. An auto-labeling policy for retention labels is needed to automatically apply that retention label based on the detection of the custom sensitive info type (Employee ID pattern EMP-####). Together, these two components enable automatic classification and retention without manual user intervention.

Answer

sensitivity label

Answer

data loss prevention (DLP) policy

Question 14

A compliance officer needs to identify documents in SharePoint Online that contain confidential business information by using a machine learning model. Which Microsoft Purview solution should be configured?

Accepted Answer

B: Information Protection (trainable classifiers). Option B is correct because trainable classifiers in Microsoft Purview Information Protection use machine learning models to identify documents containing sensitive or confidential business information based on content patterns and context. Unlike simple keyword matching, trainable classifiers learn from sample documents to accurately detect specific types of confidential data, such as intellectual property or financial reports, in SharePoint Online.

Answer

A: Data Lifecycle Management

Answer

C: eDiscovery

Answer

D: Communication Compliance

Question 15

A compliance officer needs to ensure that all documents in a SharePoint Online site library are declared as permanent records, preventing any edits or deletions. Which Microsoft Purview solution should be used?

Accepted Answer

Retention label with 'Regulatory record'. A retention label with the 'Regulatory record' option is the correct solution because it locks the record as a permanent record, preventing any edits or deletions by any user, including administrators. This is the only Purview feature that enforces immutable, unmodifiable records in SharePoint Online, meeting the compliance officer's requirement for permanent records.

Answer

Retention policy

Answer

Sensitivity label

Answer

eDiscovery hold