MS-102 Manage compliance by using Microsoft Purview Practice Test 10 — 15 Questions

Question 1

Your organization uses Microsoft Purview to classify and protect data. You need to create a custom sensitive info type that detects employee IDs formatted as 'EMP-XXXXX' where X is a digit. Which approach should you use?

Accepted Answer

Create a custom sensitive info type using a regular expression.. Option B is correct because you can create a custom sensitive info type using a regular expression pattern. Option A is wrong because the built-in type may not match exactly. Option C is wrong because the keyword dictionary can be used as an additional element, but the pattern is best defined by regex. Option D is wrong because exact data match requires a source of truth, not a pattern.

Answer

Use a keyword dictionary for the pattern.

Answer

Use exact data match (EDM) based classification.

Answer

Use the built-in 'Employee ID' sensitive info type.

Question 2

Refer to the exhibit. You have a DLP policy in test mode as shown. A user reports that they received a notification that sharing credit card numbers is blocked, but they were still able to share them. What is the most likely reason?

Accepted Answer

The policy is in test mode, which does not enforce actions.. Option B is correct because when a DLP policy is in test mode, it notifies users but does not actually block the action. Option A is wrong because the rule includes the action BlockAccess, but test mode overrides it. Option C is wrong because the condition is valid. Option D is wrong because the notification is enabled in the rule and policy.

Answer

The rule action 'BlockAccess' is not included in the policy.

Answer

The condition 'SensitiveInformation' is not configured correctly.

Answer

The notification is not enabled in the policy.

Question 3

You need to ensure that all documents in a SharePoint Online site are automatically labeled with a 'Confidential' sensitivity label. Which Microsoft Purview feature should you use?

Accepted Answer

Microsoft Purview auto-labeling policy. Option C is correct because auto-labeling policies can automatically apply sensitivity labels to documents in SharePoint. Option A is wrong because DLP policies don't apply labels. Option B is wrong because manual labeling requires user action. Option D is wrong because retention policies don't apply sensitivity labels.

Answer

Microsoft Purview Data Loss Prevention policy

Answer

Microsoft Purview retention policy

Answer

Microsoft Purview manual labeling

Question 4

Your organization receives a data subject request (DSR) to export personal data of a user. Which Microsoft Purview solution should you use to search for and export the data?

Accepted Answer

Microsoft Purview eDiscovery. Option A is correct because Microsoft Purview eDiscovery can search for content across Microsoft 365 and export it. Option B is wrong because audit logs only track activities, not content search. Option C is wrong because DLP is for preventing data loss, not exporting. Option D is wrong because retention policies do not export data.

Answer

Microsoft Purview retention policies

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Data Loss Prevention

Question 5

Refer to the exhibit. You have two DLP compliance rules as shown. A user sends an email containing both PII and credit card numbers. Which rule will be applied?

Accepted Answer

Both rules will be evaluated, and the most restrictive action will be applied.. Option D is correct because the DLP system evaluates all rules and applies the most restrictive action. Since both rules have BlockAccess, both would block, but in practice, the system applies the highest priority rule (lowest number) or the most restrictive. In this case, both have BlockAccess, so the rule with priority 1 (Block Credit Cards) takes precedence. However, the correct answer is that both rules are evaluated and the most restrictive action is applied; since both block, the block action from either is applied. But given the options, D correctly states that both rules are evaluated and the most restrictive action is taken.

Answer

Block PII rule only

Answer

Block Credit Cards rule only

Answer

Neither rule will apply because they conflict.

Question 6

Your organization uses Microsoft Purview to manage compliance. You need to ensure that all documents containing 'Project X' are automatically retained for 5 years. Which solution should you use?

Accepted Answer

Microsoft Purview retention policies with adaptive scopes. Option B is correct because retention policies can automatically retain content based on conditions like sensitive info types. Option A is wrong because DLP prevents data loss, not retention. Option C is wrong because sensitivity labels can trigger retention but the direct tool is retention policy. Option D is wrong because audit logs track events, not enforce retention.

Answer

Microsoft Purview sensitivity labels

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Data Loss Prevention

Question 7

Refer to the exhibit. You are configuring Microsoft Purview Records Management. You have a document that is classified under 'Finance' department and 'Invoices' category. Which retention label will be applied if both labels are auto-applied based on the same condition?

Accepted Answer

Finance Retention. Option B is correct because when multiple retention labels could be applied, the system applies the one with the longest retention period. 'Finance Retention' retains for 7 years, while 'HR Retention' retains for 5 years. Option A is wrong because both labels are auto-applied. Option C is wrong because there is no conflict; the longest retention wins. Option D is wrong because the system does not apply both; it chooses one.

Answer

Both labels will be applied, causing a conflict.

Answer

HR Retention

Answer

No label will be applied because of the conflict.

Question 8

Your organization uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. Users report that they are unable to share files containing credit card numbers via email. You need to allow sharing with specific business partners while maintaining protection for all other recipients. What should you configure?

Accepted Answer

Configure the DLP policy to allow users to override the action with a business justification.. Option B is correct because DLP policies support overriding with business justification when the policy is configured to allow it. Option A is incorrect because file policies focus on file properties, not content inspection for credit cards. Option C is incorrect because sensitivity labels do not override DLP actions. Option D is incorrect because the DLP policy itself must enable the override, not a separate policy.

Answer

Create a separate DLP policy with lower priority that allows sharing with the partners.

Answer

Assign a custom sensitivity label to emails sent to the partners.

Answer

Configure a file policy in Microsoft Purview Information Protection to exempt the partners.

Question 9

Your company is implementing Microsoft Purview Records Management. You need to ensure that invoices are retained for seven years after they are paid, and then automatically deleted. Which type of label should you create?

Accepted Answer

Retention label with disposition review after the trigger event. Option C is correct because a retention label that triggers disposition review after seven years meets the requirement. Option A is incorrect because sensitivity labels do not manage retention. Option B is incorrect because a retention policy cannot be scoped to individual items based on metadata like payment date. Option D is incorrect because a disposition review label is not a standard label type; disposition is a action within a retention label.

Answer

Disposition review label assigned to invoices

Answer

Retention policy applied to all documents in SharePoint

Answer

Sensitivity label with auto-labeling

Question 10

Your organization uses Microsoft Purview Data Lifecycle Management and has a retention policy that retains all SharePoint documents for three years. However, for a specific research project, you need to retain documents for five years after the project ends. Some documents are already marked with a different retention label. What should you do?

Accepted Answer

Apply a retention label with a five-year retention period to the research documents.. Option D is correct because a retention label applied at the item level takes precedence over a broader retention policy. Option A is incorrect because a new policy would not override an existing label unless the label is removed. Option B is incorrect because you cannot exclude specific documents from a policy; you must use labels. Option C is incorrect because labels have precedence over policies.

Answer

Modify the existing retention policy to exclude the research project site.

Answer

Remove the existing retention labels from the research documents and rely on the policy.

Answer

Create a new retention policy that applies to the research project site and set the retention period to five years.

Question 11

Your organization uses Microsoft Purview Audit (Standard) for auditing user activity. You receive an alert that a user accessed sensitive files in SharePoint Online. You need to investigate the exact actions performed by the user. Which action should you take?

Accepted Answer

Enable Audit (Premium) licensing for the user and then search the audit log.. Option C is correct because Audit (Standard) only retains audit logs for 90 days and does not include detailed file-level operations like item access. You would need to upgrade to Audit (Premium) to get those details. Option A is incorrect because the Search-UnifiedAuditLog cmdlet works with both editions but may not show item-level details in Standard. Option B is incorrect because the Compliance Manager does not store audit logs. Option D is incorrect because there is no 'Audit Log Search' tab in Purview; the correct tool is the Audit solution.

Answer

Run the Search-UnifiedAuditLog cmdlet in Exchange Online PowerShell.

Answer

Navigate to the Microsoft Purview portal and use the Audit Log Search tab.

Answer

Access Microsoft Purview Compliance Manager and review the user's activity.

Question 12

A company uses Microsoft Purview Information Protection to classify and protect sensitive data. They have configured auto-labeling policies for Microsoft 365 apps. However, users report that some documents containing credit card numbers are not being labeled automatically. You verify that the sensitive info type for credit cards is correctly defined. What is the most likely cause?

Accepted Answer

The documents are stored in on-premises file shares, not in SharePoint or OneDrive.. Option B is correct because auto-labeling policies can only label documents that are stored in Microsoft 365 (SharePoint Online, OneDrive for Business) or Exchange Online, not on-premises file shares. Option A is incorrect because auto-labeling is not limited to Word, Excel, PowerPoint; it also works for other formats. Option C is incorrect because sensitivity labels can be configured for auto-labeling. Option D is incorrect because the DLP policy does not affect auto-labeling.

Answer

The auto-labeling policy only applies to Word, Excel, and PowerPoint files.

Answer

The sensitivity label used for auto-labeling is not published to users.

Answer

The DLP policy for credit cards is blocking the auto-labeling process.

Question 13

Your organization needs to prevent users from sharing documents containing personally identifiable information (PII) with external users. You have Microsoft Purview Data Loss Prevention (DLP) deployed. What should you configure?

Accepted Answer

Create a DLP policy that detects PII and restricts sharing to external users.. Option A is correct because a DLP policy can be configured to detect PII and block external sharing. Option B is incorrect because sensitivity labels do not block sharing; they classify data. Option C is incorrect because conditional access blocks access based on conditions, not content. Option D is incorrect because auditing only logs activity, it does not prevent sharing.

Answer

Apply a sensitivity label that blocks external sharing.

Answer

Configure a conditional access policy in Microsoft Entra ID to block external sharing.

Answer

Enable auditing for all document sharing activities.

Question 14

Your organization uses Microsoft Purview Records Management and has a file plan that categorizes records by department. You need to ensure that HR records are retained for seven years after employee termination, while finance records are retained for ten years after the end of the fiscal year. What is the most efficient way to implement this?

Accepted Answer

Create two retention labels: one for HR with termination trigger and seven-year retention, and one for Finance with end-of-fiscal-year trigger and ten-year retention.. Option C is correct because you can create separate retention labels for each department with different trigger events and retention periods. Option A is incorrect because a single label cannot have multiple retention periods. Option B is incorrect because retention policies apply broadly and cannot easily distinguish between departments for different retention periods. Option D is incorrect because file plan is used for managing labels, not for setting retention periods directly.

Answer

Create a single retention label with a trigger event and adjust the retention period using PowerShell.

Answer

Define the retention settings in the file plan and apply them to both departments.

Answer

Create two retention policies, one for HR and one for Finance, each with the appropriate retention period.

Question 15

Your company uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data in Microsoft Teams. Users are sharing credit card numbers in Teams chat messages. You have a DLP policy that detects credit card numbers and blocks the message. However, users report that they can still send messages containing credit card numbers without any block. What is the most likely reason?

Accepted Answer

The DLP policy for Teams is only applied when external users are part of the chat.. Option A is correct because DLP for Teams chat messages only scans messages that include at least one user from outside the organization (external users). If both sender and recipient are internal, the policy does not apply. Option B is incorrect because DLP policies can be scoped to specific users. Option C is incorrect because Teams DLP policies cover both chat and channel messages. Option D is incorrect because DLP policies apply to both persistent and transient messages.

Answer

The DLP policy does not apply to transient messages like chat.

Answer

The DLP policy is not configured to include the users' group.

Answer

The DLP policy only applies to channel messages, not private chats.