MS-102 Manage compliance by using Microsoft Purview — 30 Questions

Question 1

A compliance administrator wants to automatically apply a 'Confidential' sensitivity label to documents that contain tax identification numbers. Which two configurations are required? (Choose two.)

Accepted Answer

Define a sensitive information type for tax IDs. A sensitive information type (SIT) defines the pattern to detect tax identification numbers (e.g., using regex or keyword lists) in content. Option D is correct because an auto-labeling policy automatically applies the sensitivity label to documents when the SIT is matched, without requiring user intervention. Together, they enable automatic classification based on content inspection.

Answer

Create a sensitivity label with the desired protection settings

Answer

Configure a data loss prevention (DLP) rule

Question 2

A compliance administrator needs to preserve all documents in a SharePoint Online site that were created before a specific date for a legal hold. The hold should prevent any modification or deletion of those documents. What should the administrator configure?

Accepted Answer

eDiscovery hold. An eDiscovery hold (also known as a litigation hold) is the correct mechanism for legal holds. When placed on a SharePoint site, it preserves content by retaining the original versions in the Preservation Hold library if documents are edited or deleted. It does not prevent users from modifying current documents, but it ensures the original content is available for compliance. This preserves all documents created before a specific date.

Answer

Retention label applied automatically

Answer

Data loss prevention policy

Answer

Sensitivity label with encryption

Question 3

A compliance administrator needs to preserve all communications in a user's mailbox and OneDrive for an ongoing litigation. The user must continue working normally, but their data should not be altered or deleted. Which Microsoft Purview feature should be applied?

Accepted Answer

eDiscovery Hold. eDiscovery Hold is the correct feature for preserving all communications in both the user's mailbox and OneDrive. An eDiscovery hold can be placed on a user's entire mailbox and OneDrive site without a search query, preserving all content in its original state, including deleted and modified items, while allowing the user to continue working. Litigation Hold is an Exchange Online mailbox-only feature and does not apply to OneDrive. Retention policy preserves data but is typically for compliance, and DLP prevents data leakage, not preservation.

Answer

Litigation Hold

Answer

Retention policy

Answer

Data Loss Prevention (DLP) policy

Question 4

A compliance officer wants to automatically apply a 'Confidential' sensitivity label to documents in SharePoint Online that contain credit card numbers. Which two Microsoft Purview features must be configured together? (Choose two.)

Accepted Answer

Data Loss Prevention (DLP) policy. To automatically apply a 'Confidential' sensitivity label to documents containing credit card numbers in SharePoint Online, you must configure a sensitivity label with auto-labeling (client-side or service-side) to detect the sensitive content, and a Data Loss Prevention (DLP) policy to enforce the labeling action. The DLP policy can be set to automatically apply the sensitivity label when credit card patterns are matched, using the same sensitive info types as auto-labeling. Together, they ensure that content is both classified and protected at rest.

Answer

Retention label policy

Answer

Microsoft Purview Information Protection scanner

Question 5

A compliance officer needs to ensure that all emails containing payment card information (PCI) are automatically encrypted when sent to external recipients. The encryption should occur without user intervention. Which two features should be configured together? (Choose two.)

Accepted Answer

Data Loss Prevention (DLP) policy with encryption action. A compliance officer should configure a sensitivity label with encryption (option B) that defines the encryption settings, and a DLP policy (option A) that detects PCI data and automatically applies that sensitivity label. In the DLP policy, the action is to apply the sensitivity label, not a direct encryption action. The DLP rule uses built-in sensitive information types (e.g., Credit Card Number) to trigger the label application. The label then encrypts the message, satisfying the requirement without user intervention.

Answer

Microsoft Purview Message Encryption

Answer

Transport rule with encryption

Question 6

A compliance officer needs to ensure that all outbound emails containing credit card numbers sent to external recipients are automatically encrypted without requiring user intervention. Which Microsoft Purview feature should be configured?

Accepted Answer

Data Loss Prevention (DLP) policy with a rule that encrypts the message when credit card numbers are detected.. A Data Loss Prevention (DLP) policy in Microsoft Purview can be configured with a rule that automatically detects credit card numbers (using a built-in sensitive info type) and applies encryption via Transport Layer Security (TLS) or Information Rights Management (IRM) to outbound emails sent to external recipients. This meets the compliance officer's requirement for automatic encryption without user intervention, as the DLP rule triggers encryption at the transport level in Exchange Online.

Answer

Sensitivity label with auto-labeling based on credit card numbers.

Answer

Retention policy for Exchange Online.

Answer

eDiscovery case for content search.

Question 7

A compliance officer needs to automatically apply a retention label to documents in a SharePoint Online document library that contain the exact phrase 'Project Alpha'. The label must retain the documents for 5 years and then delete them. Which two Microsoft Purview components must be configured to achieve this? (Choose two.)

Accepted Answer

retention label configured with a retention action. To achieve this, you must configure both a retention label with the retention action (retain for 5 years, then delete) and an auto-apply retention label policy with a KQL query that matches the exact phrase 'Project Alpha'. The policy automatically assigns the label to documents containing that phrase.

Answer

sensitivity label configured with a retention marking

Answer

Data Loss Prevention (DLP) policy with a condition matching 'Project Alpha'

Question 8

A user is leaving the organization, and a litigation hold must be placed on their Exchange Online mailbox to preserve all existing and future data indefinitely. The user's mailbox will continue to be monitored for any attempts to delete data. Which Microsoft Purview feature should the compliance officer use?

Accepted Answer

Litigation Hold. Litigation Hold is the correct feature because it preserves all mailbox content, including future items, and prevents permanent deletion. It is the most direct mailbox-level hold for this scenario. Monitoring deletion attempts is done via mailbox auditing, not by the hold itself; however, the hold ensures data remains preserved even if deletion is attempted.

Answer

eDiscovery hold (Core or Advanced)

Answer

retention policy with 'Preserved forever' state

Answer

In-Place Hold (Exchange Online)

Question 9

A compliance officer needs to ensure that all emails sent to a specific distribution group are automatically retained for 3 years and then deleted. Which Microsoft Purview feature should be used?

Accepted Answer

A: Data Lifecycle Management (retention policy). Data Lifecycle Management (retention policies) in Microsoft Purview can be applied to Exchange Online mailboxes. For a distribution group, you can create a retention policy that applies to the mailboxes of the group's members. The policy can be configured to retain items for 3 years and then delete them using the 'Retain for 3 years, then delete' action. This ensures messages sent to the group are retained as part of the members' mailbox content.

Answer

B: Information Protection (sensitivity labels)

Answer

C: Data Loss Prevention (DLP policy)

Answer

D: eDiscovery (content search)

Question 10

A compliance officer needs to ensure that no user can permanently delete a document from a specific SharePoint Online site. The document must be kept for at least 5 years. Which Microsoft Purview solution should the officer configure?

Accepted Answer

B: Retention policy for the site with retention period of 5 years and action set to 'Retain'.. A retention policy with the 'Retain' action ensures that documents in the SharePoint site are preserved for the specified period and cannot be permanently deleted by users or system processes. This meets the compliance requirement of a 5-year minimum retention and prevents permanent deletion, as retained items are moved to the Preservation Hold library.

Answer

A: Sensitivity label with a retention period of 5 years.

Answer

C: DLP policy to prevent deletion of documents.

Answer

D: eDiscovery hold on the site.

Question 11

A compliance officer needs to identify documents in SharePoint Online that contain credit card numbers. The officer wants a solution that can automatically detect and mark these documents for further review without applying any protection actions. Which Microsoft Purview solution should the officer use?

Accepted Answer

Microsoft Purview Information Protection sensitivity label auto-labeling. Microsoft Purview Information Protection sensitivity label auto-labeling can automatically detect sensitive information types such as credit card numbers in SharePoint Online and apply a sensitivity label to mark the document for review. The label can be configured with no protection actions (e.g., no encryption or access restrictions), satisfying the requirement of detection and marking without protection. DLP policies are more focused on preventing data loss via actions like blocking or alerting, and do not 'mark' documents.

Answer

Microsoft Purview Data Loss Prevention (DLP) policy

Answer

Microsoft Purview eDiscovery content search

Answer

Microsoft Purview Records Management retention label

Question 12

A compliance officer needs to automatically apply a sensitivity label that encrypts documents in SharePoint Online when they contain credit card numbers. The solution must not require manual user action. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both required components.)

Accepted Answer

Sensitivity labels and auto-labeling policies. The requirement is to automatically apply a sensitivity label that encrypts documents containing credit card numbers, without manual user action. Sensitivity labels define the encryption and protection settings, while auto-labeling policies automatically apply those labels based on sensitive information types (e.g., credit card numbers). This combination meets the automation and encryption need. Option B is incorrect because retention labels do not provide encryption; they are designed for retention and deletion policies, not for protection. DLP policies can detect sensitive data but cannot directly apply retention labels with encryption; moreover, retention labels lack encryption capabilities. Therefore, only Option A correctly identifies the two required components.

Answer

Data loss prevention (DLP) policies and retention labels

Answer

Sensitivity labels and retention policies

Answer

Auto-labeling policies and communication compliance policies

Question 13

A compliance officer needs to discover and review documents in SharePoint Online that contain driver's license numbers, but the officer does not want to apply any protection actions automatically. Which Microsoft Purview solution should be used?

Accepted Answer

Data Classification. Data Classification in Microsoft Purview allows you to identify and label sensitive content, such as driver's license numbers, across SharePoint Online without automatically applying protection actions like encryption or access restrictions. This solution is ideal for discovery and review scenarios where the compliance officer needs to locate sensitive data but does not want to enforce automated policies.

Answer

Data Lifecycle Management

Answer

Records Management

Answer

Information Protection

Question 14

A compliance officer needs to ensure that all documents in a SharePoint Online site library are declared as permanent records, preventing any edits or deletions. Which Microsoft Purview solution should be used?

Accepted Answer

Retention label with 'Regulatory record'. A retention label with the 'Regulatory record' option is the correct solution because it locks the record as a permanent record, preventing any edits or deletions by any user, including administrators. This is the only Purview feature that enforces immutable, unmodifiable records in SharePoint Online, meeting the compliance officer's requirement for permanent records.

Answer

Retention policy

Answer

Sensitivity label

Answer

eDiscovery hold

Question 15

A compliance officer needs to automatically apply a 'Highly Confidential' sensitivity label that encrypts documents in SharePoint Online when they contain credit card numbers. The labeling must happen automatically without user interaction. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both required components.)

Accepted Answer

Sensitivity label and auto-labeling policy. To automatically apply a 'Highly Confidential' sensitivity label that encrypts documents in SharePoint Online when credit card numbers are detected, you must configure both a sensitivity label (which defines the encryption and protection settings) and an auto-labeling policy (which specifies the conditions, such as sensitive info types like credit card numbers, and triggers automatic labeling without user interaction). The auto-labeling policy applies the sensitivity label to documents that match the defined rules, enabling automated enforcement. DLP policies detect and act on data but do not apply sensitivity labels automatically; therefore, option C is incorrect.

Answer

DLP policy and retention label

Answer

Sensitivity label and DLP policy

Answer

Auto-labeling policy and retention label

Question 16

A compliance officer needs to automatically encrypt and apply a 'Do Not Forward' restriction to all outgoing emails sent by the finance department that contain credit card numbers. The solution must work without requiring users to manually apply labels. Which configuration is required?

Accepted Answer

Create an auto-labeling policy for Microsoft Purview Sensitivity Labels that applies a label with encryption and 'Do Not Forward' configured, scoped to the finance department. Microsoft Purview auto-labeling policies can automatically apply a sensitivity label that includes encryption and 'Do Not Forward' based on sensitive info types and user scope. However, a mail flow rule in Exchange Online can also satisfy the requirement by using the 'Apply rights protection to a message' action with the 'Do Not Forward' RMS template, scoped to the finance department and sensitive content. Therefore, both B and C are valid configurations.

Answer

Create a Data Loss Prevention (DLP) policy with the action 'Encrypt email messages'

Answer

Create a retention label that encrypts the email

Question 17

A compliance officer needs to automatically detect and apply a sensitivity label to documents in SharePoint Online that contain a custom sensitive information type (e.g., employee ID pattern). The label must be applied automatically, and users must be prompted to provide a justification when attempting to remove the label. Which combination of configurations should the officer implement?

Accepted Answer

Create a sensitivity label with an auto-labeling policy that uses a custom sensitive info type, and configure the label's protection settings to require user justification to remove the label.. Microsoft Purview sensitivity labels support auto-labeling policies that can automatically apply a label based on custom sensitive information types (e.g., employee ID patterns). Additionally, the label's protection settings include an option to require user justification when removing the label, which meets the compliance officer's requirement for both automatic detection and removal justification.

Answer

Create a retention label and publish it to the site via auto-labeling policy.

Answer

Use a Data Loss Prevention (DLP) policy to apply the label and configure the policy to block removal.

Answer

Deploy the Azure Information Protection scanner to scan SharePoint Online documents.

Question 18

A compliance officer needs to ensure that all documents in a SharePoint Online site are retained for 5 years and then automatically deleted. During the retention period, users must be allowed to edit the documents but not delete them. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Create a retention policy with a retention rule for 5 years, configured to retain then delete, and enable the preservation hold setting.. A retention policy with a 'retain then delete' action meets both requirements: it retains documents for 5 years and then automatically deletes them. Retention policies also preserve content against user deletion during the retention period by automatically applying a hold on the site, preventing permanent deletion. This policy applies at the site level, ensuring all content is covered without requiring manual labeling.

Answer

Create a retention label with the action to retain for 5 years then delete, and apply it to the site via auto-labeling.

Answer

Create a sensitivity label with encryption and set an expiration date for 5 years.

Answer

Place the site on an eDiscovery hold with a custom retention period.

Question 19

A compliance officer needs to automatically detect and apply a sensitivity label to documents in SharePoint Online that contain personally identifiable information (PII) such as social security numbers. The label should be applied automatically, and users must be able to override the label with a justification. Which two Microsoft Purview components must be configured to achieve this?

Accepted Answer

sensitive info type (SIT) and an auto-labeling policy. An auto-labeling policy can scan SharePoint Online for sensitive info types (SITs) like social security numbers and automatically apply a sensitivity label. The policy can be configured to allow users to override the label with a justification via the 'Mandatory labeling with justification' setting in the sensitivity label policy. Option B is incorrect because policy tips are a feature of Data Loss Prevention (DLP) policies, not sensitivity label auto-labeling. User override with justification is handled by the sensitivity label policy's 'Mandatory labeling' setting, not a policy tip. Therefore, only option A correctly identifies the required components.

Answer

sensitivity label with auto-labeling for SharePoint and a policy tip

Answer

data loss prevention (DLP) policy and a retention label

Answer

default sensitivity label and a compliance tag

Question 20

A company uses Microsoft Purview Data Lifecycle Management. They have a retention policy that retains all documents in a specific SharePoint Online site for 5 years and then automatically deletes them. Some documents in that site have a retention label that retains them for 7 years and then deletes them. What is the effective retention period for those labeled documents?

Accepted Answer

7 years. When a retention label is applied to a document, it takes precedence over a retention policy at the item level. The label's retention setting (7 years) overrides the site-level policy (5 years), so the effective retention period for the labeled documents is 7 years, after which they are automatically deleted.

Answer

5 years

Answer

The documents are retained indefinitely due to conflict

Answer

The documents are retained for 5 years and then archived