MS-102 Manage compliance by using Microsoft Purview Practice Test 10 — 15 Questions

Question 1

Your organization uses Microsoft Purview Data Lifecycle Management. You need to review the disposition of content that has reached the end of its retention period. What should you configure?

Accepted Answer

Enable disposition review in the retention policy or label.. Disposition review is a feature in Microsoft Purview Data Lifecycle Management that allows you to review content before it is permanently deleted at the end of its retention period. To enable it, you must configure the retention policy or retention label to trigger a disposition review. This ensures that content is not automatically deleted without human oversight, which is often required for regulatory or legal reasons.

Answer

Create a DLP policy to notify administrators.

Answer

Place the content on an eDiscovery hold.

Answer

Create a retention label with a retention period.

Question 2

Your organization needs to ensure that all emails containing credit card numbers are automatically encrypted before being sent to external recipients. Which Microsoft Purview solution should you configure?

Accepted Answer

Configure a DLP policy that uses the 'Encrypt email messages' action.. A Microsoft Purview DLP policy can detect sensitive information types like credit card numbers (via the Credit Card Number SIT) and apply the 'Encrypt email messages' action, which uses Office 365 Message Encryption (OME) to encrypt the email before it leaves the organization. This directly satisfies the requirement to automatically encrypt emails containing credit card numbers sent to external recipients. DLP policies are evaluated at send time and can enforce encryption without user intervention.

Answer

Create a sensitivity label that applies encryption and auto-labeling.

Answer

Set up a retention policy with encryption.

Answer

Implement a Communication Compliance policy.

Question 3

Your organization uses Microsoft Purview Data Lifecycle Management. You need to review the disposition of content that has reached the end of its retention period. What should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure the sensitivity label's settings to include the footer and encryption.. Sensitivity labels in Microsoft Purview Information Protection can be configured with content marking (headers, footers, watermarks) and encryption settings directly in the label definition. When a user manually applies the 'Confidential' label in Word, the label's configured footer and encryption are applied automatically to the document. This is the core behavior of sensitivity labels — the label itself carries the protection settings.

Answer

Modify the sensitivity label policy to include the footer.

Answer

Create a DLP rule that applies the footer and encryption.

Answer

Set up auto-labeling to apply the footer and encryption.

Question 4

Your organization needs to automatically detect and classify documents containing passport numbers in SharePoint Online. Which Microsoft Purview feature should you use?

Accepted Answer

Auto-labeling with sensitivity labels.. Auto-labeling with sensitivity labels in Microsoft Purview can automatically detect sensitive content such as passport numbers using built-in or custom sensitive information types (SITs) and then apply a sensitivity label to the document. This is the only feature among the options designed to both detect and classify (label) content at scale in SharePoint Online. The label can then drive encryption, retention, and other protections.

Answer

eDiscovery (Premium).

Answer

Data Lifecycle Management (DLM) policy.

Answer

Data Loss Prevention (DLP) policy.

Question 5

Your organization uses Microsoft Purview Compliance Manager. You need to assign a control to a specific user for implementation. What should you do?

Accepted Answer

Edit the control and assign a new owner.. In Microsoft Purview Compliance Manager, each control within an assessment has an 'Assigned to' field that designates the individual responsible for implementing and documenting that control. Editing the control and assigning a new owner is the correct way to delegate accountability for a specific control to a user. This assignment is purely for tracking and workflow purposes and does not grant any permissions to the user.

Answer

Assign the user the Compliance Manager role.

Answer

Create a DLP policy to enforce the control.

Answer

Modify the assessment to include the user.

Question 6

Your company is implementing Microsoft Purview Audit (Standard). You need to search for activities performed by a specific user in Exchange Online. Which log should you query?

Accepted Answer

Unified audit log.. Microsoft Purview Audit (Standard) stores all audit events — including Exchange Online user activities — in the Unified audit log, which is queried via the Microsoft Purview compliance portal or the Search-UnifiedAuditLog PowerShell cmdlet. To find activities performed by a specific user in Exchange Online, you search the Unified audit log and filter by the user's UPN and the relevant Exchange workloads/activities. This is the single centralized log for Purview Audit (Standard) across Microsoft 365 services.

Answer

DLP incident reports.

Answer

Azure AD audit logs.

Answer

Mailbox audit logs only.

Question 7

Which THREE actions can be taken by a Microsoft Purview Data Loss Prevention (DLP) policy in Exchange Online?

Accepted Answer

Block the email from being sent. DLP policies in Exchange Online can block sending, encrypt the message, and notify the sender with a policy tip. Justifying override is not an action; it's a user response. Blocking all emails is not granular; DLP actions are rule-based.

Answer

Allow the sender to override the block

Answer

Block all emails from the sender

Question 8

Which TWO Microsoft Purview solutions are primarily used for data classification?

Accepted Answer

Auto-labeling. Auto-labeling (B) is correct because it is a Microsoft Purview Information Protection capability that automatically applies sensitivity labels to content by scanning it for sensitive information types, trainable classifiers, or exact data match, which is a core data-classification function. Sensitivity labels (E) are also correct because they are the primary mechanism in Microsoft Purview for manually classifying and protecting content by tagging it with a classification (for example, Confidential or Highly Confidential) that can enforce encryption and other protections. Together, sensitivity labels and auto-labeling form the classification backbone of Microsoft Purview Information Protection. Data Loss Prevention (A) is not primarily a classification tool; it uses classification results to detect and block risky sharing of sensitive data. Communication Compliance (C) focuses on detecting policy violations in communications such as harassment or inappropriate content, not on classifying data. Data Lifecycle Management (D) governs retention and deletion of content rather than classifying it.

Answer

Data Loss Prevention

Answer

Communication Compliance

Answer

Data Lifecycle Management

Question 9

Your company uses Microsoft Purview Data Lifecycle Management. You have a policy that retains items for 3 years and then deletes them. A user places an eDiscovery hold on a folder that contains items subject to this policy. What happens to those items after 3 years?

Accepted Answer

They are preserved until the hold is removed.. eDiscovery hold takes precedence over the deletion policy. Items under a hold are preserved indefinitely until the hold is removed, regardless of any retention and deletion policies. Option C correctly states they are preserved until the hold is removed. Option A is incorrect because hold overrides the policy, not extending it. Option B is incorrect because items are not deleted while under hold. Option D is incorrect because items are not moved to a separate location.

Answer

They are retained for an additional 3 years.

Answer

They are deleted after 3 years.

Answer

They are moved to a separate location.

Question 10

Your company has a Microsoft 365 E5 subscription. You need to prevent users from sharing files containing credit card numbers with external users. What should you configure?

Accepted Answer

A DLP policy that blocks sharing of content with sensitive info type.. A Data Loss Prevention (DLP) policy in Microsoft 365 can detect sensitive information types such as credit card numbers and block sharing with external users. DLP policies are designed to prevent accidental or intentional sharing of sensitive data across Exchange, SharePoint, OneDrive, and Teams, making it the correct control for this requirement.

Answer

A retention policy for SharePoint sites.

Answer

An information barrier policy.

Answer

A sensitivity label with encryption.

Question 11

You are a compliance administrator. You need to search for emails that contain trade secrets sent by a specific user in the last month. The search must include all mailboxes. What should you use?

Accepted Answer

Content search in Microsoft Purview.. Content search in Microsoft Purview allows searching across all mailboxes for specific keywords and date ranges, making it the appropriate tool to find emails containing trade secrets from a specific user in the last month. Option D is correct. Option A is wrong because eDiscovery (Premium) is designed for complex legal workflows and not for basic content search. Option B is wrong because Audit log search tracks user and admin activities, not email content. Option C is wrong because Data Loss Prevention (DLP) reports show policy matches and alerts, but do not allow searching across mailbox content for specific keywords.

Answer

eDiscovery (Premium) case.

Answer

Data Loss Prevention reports.

Answer

Audit log search.

Question 12

Your organization uses Microsoft Purview Data Lifecycle Management. You need to review the disposition of content that has reached the end of its retention period. What should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use a retention label marked as a regulatory record.. A retention label configured as a regulatory record provides the highest level of immutability: it prevents any user, including administrators, from deleting or modifying the item, and the label itself cannot be removed or changed once applied. This meets the requirement that records cannot be deleted or modified by anyone. The 10-year retention period is set on the label.

Answer

Create a retention policy with a preservation lock.

Answer

Use a retention label marked as a record.

Answer

Apply a default retention label to the SharePoint library.

Question 13

You need to implement a solution that allows users to classify documents containing personal data as 'Highly Confidential' and automatically encrypt them when shared via email. What should you configure?

Accepted Answer

A sensitivity label with auto-labeling and encryption.. A sensitivity label with auto-labeling and encryption is correct because sensitivity labels in Microsoft Purview Information Protection can be configured to automatically classify documents based on sensitive data types (e.g., personal data) and apply encryption to protect the content when shared via email. The auto-labeling feature uses conditions like pattern matching for personally identifiable information (PII) to assign the 'Highly Confidential' label, and the encryption action ensures the document is protected with Rights Management Services (RMS) policies, preventing unauthorized access even if the email is forwarded.

Answer

A retention label with a disposition action.

Answer

An information barrier policy.

Answer

A DLP policy with an action to block sharing.

Question 14

Your company is migrating from an on-premises file server to SharePoint Online. You need to ensure that files containing personally identifiable information (PII) are automatically detected and classified with a sensitivity label. What should you use?

Accepted Answer

Auto-labeling for sensitivity labels in Microsoft 365.. Auto-labeling for sensitivity labels in Microsoft 365 uses the same sensitive information types (SITs) and trainable classifiers that power DLP, but its purpose is to apply a sensitivity label rather than block or retain content. When files are uploaded to SharePoint Online, the service-side auto-labeling policy evaluates them against the configured rules and stamps the matching label, which then drives encryption, watermarking, and access controls. This is the only option that both detects PII and applies a sensitivity label automatically.

Answer

A retention label auto-applied by a trainable classifier.

Answer

Microsoft Information Protection scanner.

Answer

A DLP policy to block sharing of PII.

Question 15

Your organization has a Microsoft 365 E5 subscription and uses Microsoft Teams. You need to prevent external users from being added to sensitive teams that contain financial data. What should you configure?

Accepted Answer

A sensitivity label for containers that blocks guest access.. Sensitivity labels for containers (groups and sites) can be configured to block guest access, which directly prevents external users from being added to Teams that contain sensitive data. This is the most targeted and appropriate control because it enforces protection at the container level based on the label applied to the team. Conditional Access policies control access based on user, device, and location conditions but do not prevent guests from being added to a team. Information barriers prevent specific users from communicating with each other but are not designed to block all external users from a team. DLP policies protect content but do not prevent membership additions.

Answer

Azure AD Conditional Access policy for guest users.

Answer

An information barrier policy between finance and external.

Answer

A DLP policy for Teams chat and channel messages.