MS-102 Manage compliance by using Microsoft Purview Practice Test 2 — 15 Questions

Question 1

A compliance officer needs to identify documents in SharePoint Online that contain confidential business information by using a machine learning model. Which Microsoft Purview solution should be configured?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

B: Information Protection (trainable classifiers). Trainable classifiers in Microsoft Purview Information Protection use machine learning models to identify documents containing sensitive or confidential business information based on content patterns and context. Unlike simple keyword matching, trainable classifiers learn from sample documents to accurately detect specific types of confidential data, such as intellectual property or financial reports, in SharePoint Online.

Answer

A: Data Lifecycle Management

Answer

C: eDiscovery

Answer

D: Communication Compliance

Question 2

A compliance officer needs to automatically apply a sensitivity label to all documents in SharePoint Online that contain a credit card number. The label must mark the document as 'Confidential' and encrypt it. Which two Microsoft Purview components must be configured to achieve automatic labeling based on sensitive content? (Choose two.)

Accepted Answer

Sensitivity label. Sensitivity labels define the classification and protection settings (e.g., 'Confidential' marking and encryption). Auto-labeling policies automatically apply those labels to documents containing sensitive information types, such as credit card numbers, without requiring user intervention. Together, they enable automatic labeling based on sensitive content in SharePoint Online.

Answer

Data Loss Prevention (DLP) policy

Answer

Retention label policy

Question 3

A compliance officer needs to identify documents in SharePoint Online that contain confidential business information by using a machine learning model. Which Microsoft Purview solution should be configured?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft Purview Information Protection sensitivity label auto-labeling. Microsoft Purview Information Protection sensitivity label auto-labeling can automatically detect sensitive information types such as credit card numbers in SharePoint Online and apply a sensitivity label to mark the document for review. The label can be configured with no protection actions (e.g., no encryption or access restrictions), satisfying the requirement of detection and marking without protection. DLP policies are more focused on preventing data loss via actions like blocking or alerting, and do not 'mark' documents.

Answer

Microsoft Purview Data Loss Prevention (DLP) policy

Answer

Microsoft Purview eDiscovery content search

Answer

Microsoft Purview Records Management retention label

Question 4

A compliance officer needs to automatically apply a sensitivity label that encrypts documents in SharePoint Online when they contain credit card numbers. The solution must not require manual user action. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both required components.)

Accepted Answer

Sensitivity labels and auto-labeling policies. The requirement is to automatically apply a sensitivity label that encrypts documents containing credit card numbers, without manual user action. Sensitivity labels define the encryption and protection settings, while auto-labeling policies automatically apply those labels based on sensitive information types (e.g., credit card numbers). This combination meets the automation and encryption need. Option B is incorrect because retention labels do not provide encryption; they are designed for retention and deletion policies, not for protection. DLP policies can detect sensitive data but cannot directly apply retention labels with encryption; moreover, retention labels lack encryption capabilities. Therefore, only Option A correctly identifies the two required components.

Answer

Data loss prevention (DLP) policies and retention labels

Answer

Sensitivity labels and retention policies

Answer

Auto-labeling policies and communication compliance policies

Question 5

A compliance officer needs to prevent users from sending emails that contain social security numbers to external recipients. When a user attempts to send such an email from Outlook, the email should be blocked and a policy tip should be displayed explaining why the email was blocked. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Data Loss Prevention (DLP) policy. A Data Loss Prevention (DLP) policy in Microsoft Purview is designed to detect sensitive information, such as social security numbers, in emails and enforce actions like blocking the message and displaying a policy tip. This meets the compliance officer's requirement to prevent external sending of sensitive data while providing user notification.

Answer

Sensitivity labels

Answer

Communication compliance

Answer

eDiscovery

Question 6

A compliance officer needs to ensure that all documents in a SharePoint Online site library are declared as permanent records, preventing any edits or deletions. Which Microsoft Purview solution should be used?

Accepted Answer

Retention label with 'Regulatory record'. A retention label with the 'Regulatory record' option is the correct solution because it locks the record as a permanent record, preventing any edits or deletions by any user, including administrators. This is the only Purview feature that enforces immutable, unmodifiable records in SharePoint Online, meeting the compliance officer's requirement for permanent records.

Answer

Retention policy

Answer

Sensitivity label

Answer

eDiscovery hold

Question 7

A compliance officer needs to automatically apply a 'Highly Confidential' sensitivity label to any email in Exchange Online that contains social security numbers. The labeling must happen automatically without user interaction. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both required components.)

Accepted Answer

sensitivity label with auto-labeling rule and an auto-labeling policy. To automatically apply a 'Highly Confidential' sensitivity label to emails containing social security numbers, you need a sensitivity label configured with an auto-labeling rule (which defines the label and detection criteria) and an auto-labeling policy (which activates the automatic labeling without user interaction). Data Loss Prevention (DLP) policies can trigger actions like blocking or alerting but cannot directly apply sensitivity labels; they are not used for automatic labeling. Therefore, only option C correctly identifies both required components.

Answer

sensitivity label with auto-labeling rule and a Data Loss Prevention policy

Answer

retention label and a Communication Compliance policy

Answer

unified labeling client and a custom sensitive info type

Question 8

A compliance officer needs to monitor employee communications across Microsoft Teams and Outlook for potential insider trading, using predefined policies. The solution must detect keywords like 'insider tip' and 'stock' and allow designated reviewers to take action. Which Microsoft Purview solution should the officer use?

Accepted Answer

Communication Compliance. Communication Compliance is the correct Microsoft Purview solution because it is specifically designed to detect sensitive keywords (e.g., 'insider tip' and 'stock') in Microsoft Teams chats, channel messages, and Outlook emails using predefined or customizable policies. It enables designated reviewers to investigate and take remediation actions such as removing messages or escalating for legal review, directly addressing the insider trading monitoring requirement.

Answer

Data Loss Prevention

Answer

eDiscovery (Premium)

Answer

Records Management

Question 9

A compliance officer needs to automatically apply a 'Highly Confidential' sensitivity label that encrypts documents in SharePoint Online when they contain credit card numbers. The labeling must happen automatically without user interaction. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both required components.)

Accepted Answer

Sensitivity label and auto-labeling policy. To automatically apply a 'Highly Confidential' sensitivity label that encrypts documents in SharePoint Online when credit card numbers are detected, you must configure both a sensitivity label (which defines the encryption and protection settings) and an auto-labeling policy (which specifies the conditions, such as sensitive info types like credit card numbers, and triggers automatic labeling without user interaction). The auto-labeling policy applies the sensitivity label to documents that match the defined rules, enabling automated enforcement. DLP policies detect and act on data but do not apply sensitivity labels automatically; therefore, option C is incorrect.

Answer

DLP policy and retention label

Answer

Sensitivity label and DLP policy

Answer

Auto-labeling policy and retention label

Question 10

A compliance officer needs to automatically encrypt and apply a 'Do Not Forward' restriction to all outgoing emails sent by the finance department that contain credit card numbers. The solution must work without requiring users to manually apply labels. Which configuration is required?

Accepted Answer

Create an auto-labeling policy for Microsoft Purview Sensitivity Labels that applies a label with encryption and 'Do Not Forward' configured, scoped to the finance department. Microsoft Purview auto-labeling policies can automatically apply a sensitivity label that includes encryption and 'Do Not Forward' based on sensitive info types and user scope. However, a mail flow rule in Exchange Online can also satisfy the requirement by using the 'Apply rights protection to a message' action with the 'Do Not Forward' RMS template, scoped to the finance department and sensitive content. Therefore, both B and C are valid configurations.

Answer

Create a Data Loss Prevention (DLP) policy with the action 'Encrypt email messages'

Answer

Create a retention label that encrypts the email

Question 11

A compliance officer needs to retain all documents in a SharePoint Online site associated with the Finance department for 10 years, after which the documents must be automatically deleted. During the retention period, users must be allowed to edit the documents but not delete them. Which Microsoft Purview solution should the officer configure?

Accepted Answer

retention policy with a retention period of 10 years and an action to delete at the end of the period. A retention policy can be applied to a SharePoint site to enforce a 10-year retention period with a deletion action at the end, while allowing users to edit documents during that period. This meets the compliance requirement because retention policies preserve content from deletion by users, but still permit editing. The 'delete at end of retention period' action ensures automatic removal after 10 years.

Answer

retention label auto-applied to all documents in the site

Answer

Litigation hold on the site

Answer

Data Loss Prevention (DLP) policy with a retention action

Question 12

The legal department is investigating a potential data breach involving a specific user. The compliance officer needs to place a hold on all content in the user's Exchange Online mailbox and OneDrive for Business to prevent deletion until the investigation is complete. Which Microsoft Purview solution should the officer use?

Accepted Answer

eDiscovery (Standard). eDiscovery (Standard) allows you to place a hold on Exchange Online mailboxes and OneDrive for Business sites to preserve content from deletion during an investigation. This hold prevents users and automated processes from permanently deleting items, ensuring data integrity for legal or compliance reviews.

Answer

Content Search

Answer

eDiscovery (Premium)

Answer

Audit log

Question 13

A compliance officer needs to automatically apply a sensitivity label that encrypts documents in SharePoint Online when the documents contain a custom regex pattern (e.g., employee ID). The labeling must occur automatically without requiring user interaction. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both components.)

Accepted Answer

An auto-labeling policy and a sensitivity label with encryption configured. It includes both an auto-labeling policy (to automatically apply the label without user interaction) and a sensitivity label with encryption (to protect documents containing the custom regex pattern). Option D is incorrect because it lacks the auto-labeling policy; a sensitive info type and a sensitivity label alone cannot automatically apply the label. Only option A provides both required components.

Answer

Data Loss Prevention (DLP) policy and a sensitivity label

Answer

retention label and an auto-labeling policy

Answer

sensitive info type and a sensitivity label

Question 14

A compliance officer needs to automatically apply a sensitivity label named 'Confidential' to documents stored in SharePoint Online whenever the documents contain social security numbers. Users must be prevented from removing the label. Which configuration should the officer implement?

Accepted Answer

Create a sensitivity label with auto-labeling and set 'Mark content as mandatory'. Sensitivity labels support auto-labeling based on sensitive info types (e.g., social security numbers) and can be configured with protection settings, such as requiring justification to remove the label, which prevents users from easily removing the label. While the option incorrectly states 'Mark content as mandatory' (which only makes labeling mandatory, not prevents removal), the concept of using a sensitivity label with auto-labeling and appropriate protection settings meets the requirement. The other options are incorrect: retention labels (A) handle lifecycle, the MIP client (C) is outdated, and DLP policies (D) apply labels via policy but do not inherently prevent label removal.

Answer

Create a retention label with auto-labeling based on sensitive info types

Answer

Use Microsoft Information Protection (MIP) unified labeling client to apply labels

Answer

Configure Data Loss Prevention (DLP) policy to apply the label

Question 15

A compliance officer needs to ensure that all documents in a SharePoint Online site are retained for 5 years and then automatically deleted. During the retention period, users must be allowed to edit the documents but not delete them. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Create a retention policy with a retention rule for 5 years, configured to retain then delete, and enable the preservation hold setting.. A retention policy with a 'retain then delete' action meets both requirements: it retains documents for 5 years and then automatically deletes them. Retention policies also preserve content against user deletion during the retention period by automatically applying a hold on the site, preventing permanent deletion. This policy applies at the site level, ensuring all content is covered without requiring manual labeling.

Answer

Create a retention label with the action to retain for 5 years then delete, and apply it to the site via auto-labeling.

Answer

Create a sensitivity label with encryption and set an expiration date for 5 years.

Answer

Place the site on an eDiscovery hold with a custom retention period.