MS-102 Manage compliance by using Microsoft Purview Practice Test 2 — 15 Questions

Question 1

A compliance officer needs to automatically encrypt and apply a 'Do Not Forward' restriction to all outgoing emails sent by the finance department that contain credit card numbers. The solution must work without requiring users to manually apply labels. Which configuration is required?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create an auto-labeling policy for Microsoft Purview Sensitivity Labels that applies a label with encryption and 'Do Not Forward' configured, scoped to the finance department. Microsoft Purview auto-labeling policies can automatically apply a sensitivity label that includes encryption and 'Do Not Forward' based on sensitive info types and user scope. However, a mail flow rule in Exchange Online can also satisfy the requirement by using the 'Apply rights protection to a message' action with the 'Do Not Forward' RMS template, scoped to the finance department and sensitive content. Therefore, both B and C are valid configurations.

Answer

Create a Data Loss Prevention (DLP) policy with the action 'Encrypt email messages'

Answer

Create a retention label that encrypts the email

Question 2

A compliance officer needs to automatically encrypt and apply a 'Do Not Forward' restriction to all outgoing emails sent by the finance department that contain credit card numbers. The solution must work without requiring users to manually apply labels. Which configuration is required?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a sensitivity label with an auto-labeling policy that uses a custom sensitive info type, and configure the label's protection settings to require user justification to remove the label.. Microsoft Purview sensitivity labels support auto-labeling policies that can automatically apply a label based on custom sensitive information types (e.g., employee ID patterns). Additionally, the label's protection settings include an option to require user justification when removing the label, which meets the compliance officer's requirement for both automatic detection and removal justification.

Answer

Create a retention label and publish it to the site via auto-labeling policy.

Answer

Use a Data Loss Prevention (DLP) policy to apply the label and configure the policy to block removal.

Answer

Deploy the Azure Information Protection scanner to scan SharePoint Online documents.

Question 3

A compliance officer needs to ensure that all documents in a SharePoint Online site are retained for 5 years and then automatically deleted. During the retention period, users must be allowed to edit the documents but not delete them. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Create a retention policy with a retention rule for 5 years, configured to retain then delete, and enable the preservation hold setting.. A retention policy with a 'retain then delete' action meets both requirements: it retains documents for 5 years and then automatically deletes them. Retention policies also preserve content against user deletion during the retention period by automatically applying a hold on the site, preventing permanent deletion. This policy applies at the site level, ensuring all content is covered without requiring manual labeling.

Answer

Create a retention label with the action to retain for 5 years then delete, and apply it to the site via auto-labeling.

Answer

Create a sensitivity label with encryption and set an expiration date for 5 years.

Answer

Place the site on an eDiscovery hold with a custom retention period.

Question 4

A compliance officer needs to automatically encrypt and apply a 'Do Not Forward' restriction to all outgoing emails sent by the finance department that contain credit card numbers. The solution must work without requiring users to manually apply labels. Which configuration is required?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

sensitive info type (SIT) and an auto-labeling policy. An auto-labeling policy can scan SharePoint Online for sensitive info types (SITs) like social security numbers and automatically apply a sensitivity label. The policy can be configured to allow users to override the label with a justification via the 'Mandatory labeling with justification' setting in the sensitivity label policy. Option B is incorrect because policy tips are a feature of Data Loss Prevention (DLP) policies, not sensitivity label auto-labeling. User override with justification is handled by the sensitivity label policy's 'Mandatory labeling' setting, not a policy tip. Therefore, only option A correctly identifies the required components.

Answer

sensitivity label with auto-labeling for SharePoint and a policy tip

Answer

data loss prevention (DLP) policy and a retention label

Answer

default sensitivity label and a compliance tag

Question 5

A company uses Microsoft Purview Data Lifecycle Management. They have a retention policy that retains all documents in a specific SharePoint Online site for 5 years and then automatically deletes them. Some documents in that site have a retention label that retains them for 7 years and then deletes them. What is the effective retention period for those labeled documents?

Accepted Answer

7 years. When a retention label is applied to a document, it takes precedence over a retention policy at the item level. The label's retention setting (7 years) overrides the site-level policy (5 years), so the effective retention period for the labeled documents is 7 years, after which they are automatically deleted.

Answer

5 years

Answer

The documents are retained indefinitely due to conflict

Answer

The documents are retained for 5 years and then archived

Question 6

A compliance officer needs to automatically encrypt and apply a 'Do Not Forward' restriction to all outgoing emails sent by the finance department that contain credit card numbers. The solution must work without requiring users to manually apply labels. Which configuration is required?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure a condition that detects 'Last Modified Date' is older than 3 years. The auto-apply retention label policy in Microsoft Purview can use a KQL-based condition to detect documents where the 'Last Modified Date' is older than 3 years. This triggers the label to retain the documents for 5 additional years and then initiate a disposition review, meeting the compliance officer's requirement exactly.

Answer

Configure a condition that detects 'Created Date' is older than 3 years

Answer

Select the retention label and manually publish to the site, then use a Power Automate flow to apply the label

Answer

Create a data lifecycle management policy using a query for documents created before a certain date

Question 7

A compliance officer needs to ensure that all documents in a Microsoft Teams channel are automatically retained for 3 years after creation and then permanently deleted. The retention policy should apply only to the specific channel, not the entire team. Which approach should the officer use?

Accepted Answer

Publish a retention label to the channel and configure auto-application rules based on creation date. Documents in a Teams channel are stored in SharePoint. To automatically retain and then delete documents, you need a retention label with auto-application rules scoped to the channel's SharePoint site. This ensures documents are retained for 3 years from creation and then permanently deleted, without affecting other content.

Answer

Create a retention policy in Microsoft Purview and select the location 'Teams channel messages', then specify the channel name

Answer

Create a retention policy in Microsoft Purview and select the location 'Teams chats' for the entire team

Answer

Use Exchange Online PowerShell to create a retention policy for the channel mailbox

Question 8

A compliance officer needs to implement a policy that automatically marks emails containing a specific custom sensitive information type as a regulatory record upon sending. The regulatory record must be retained for 10 years and cannot be deleted by users. Which two components must be configured to achieve this?

Accepted Answer

Create a custom sensitive information type and configure an auto-apply retention label policy that applies a regulatory record label. To automatically mark emails containing a specific custom sensitive information type as a regulatory record, you need a custom sensitive information type to detect the pattern and an auto-apply retention label policy that applies a regulatory record label. Option A covers both components: the custom sensitive information type and the auto-apply policy. Option B is incorrect because a default retention label applied via a retention policy to all mailboxes does not detect content patterns—it applies uniformly to all emails regardless of content, and does not automatically mark as a regulatory record based on content. Options C and D are also incorrect: C requires manual user action, and D only blocks emails without applying a label.

Answer

Create a default retention label for emails and assign it to all mailboxes via a retention policy

Answer

Create a retention label with record marking and publish it to all users, then train users to apply it manually

Answer

Create a Data Loss Prevention (DLP) policy that detects the custom pattern and blocks the email until it is labeled

Question 9

You are the Microsoft 365 administrator for Contoso Ltd. The compliance team needs to implement data lifecycle management and records management using Microsoft Purview. Which three of the following actions should you take to meet these requirements? (Choose three.)

Accepted Answer

Create retention labels that automatically apply a retention policy to documents containing personally identifiable information (PII).. To meet data lifecycle management and records management requirements: (1) Publishing retention labels allows users to manually apply them to items in SharePoint and OneDrive, enabling user-driven classification and retention. (2) Configuring a file plan for records management defines retention schedules and disposal reviews, which is essential for records management. (3) Creating retention labels that automatically apply a retention policy to documents containing PII leverages sensitive information types for automated classification and lifecycle management without user intervention. DLP policies focus on preventing data loss, not deletion schedules; Compliance Manager assesses compliance posture; audit logging does not enforce retention periods.

Answer

Deploy Microsoft Purview Compliance Manager to automate the deletion of stale data in Exchange Online.

Answer

Enable audit logging to automatically enforce retention periods for all Microsoft 365 workloads.

Answer

Use data loss prevention (DLP) policies to automatically delete emails containing credit card numbers after 30 days.

Question 10

A global administrator at Fabrikam Inc. plans to implement Microsoft Purview to manage compliance for sensitive information. The solution must include the ability to discover, classify, and protect sensitive data across Microsoft 365 services. Which three of the following should the administrator configure? (Choose three.)

Accepted Answer

Configure a trainable classifier to identify and label content that matches specific organizational patterns, such as legal contracts.. Option A (Create a sensitive information type to detect custom data patterns, such as employee IDs) is correct because custom sensitive information types (SITs) in Microsoft Purview let you define regex/keyword-based patterns for organization-specific data like employee IDs, enabling discovery and classification across Microsoft 365 workloads. Option E (Configure a trainable classifier to identify and label content that matches specific organizational patterns, such as legal contracts) is correct because trainable classifiers use machine learning to recognize content by example, which is the appropriate mechanism for unstructured, organization-specific content such as contracts that regex-based SITs cannot reliably detect. Option F (Enable auto-labeling policies in Microsoft Purview to automatically apply sensitivity labels to documents containing trade secrets) is correct because auto-labeling policies (client-side or service-side) apply sensitivity labels automatically to content matching SITs or trainable classifiers, delivering the protection requirement at scale across Exchange, SharePoint, OneDrive, and Teams. The unmarked options do not belong: eDiscovery is for identifying and preserving content for legal/investigation workflows, not for automatically classifying all Teams chat content; DLP policies enforce sharing/usage restrictions but do not themselves discover and classify sensitive data (they rely on existing SITs/labels); and Insider Risk Management detects risky user activity and does not scan and label historical email data.

Answer

Set up a data loss prevention (DLP) policy to block external sharing of files labeled as 'Highly Confidential'.

Answer

Enable Microsoft Purview Insider Risk Management to scan and label all historical email data.

Answer

Deploy Microsoft Purview eDiscovery to automatically classify all content in Microsoft Teams chats.

Question 11

Drag and drop the steps to configure Microsoft 365 audit log search in the correct order.

Accepted Answer

Navigate to Microsoft 365 Defender portal and select Audit, then set the date range and select activities, then apply optional filters, then run the search and export results.. Audit log search is performed in Defender with date range, activities, and optional filters, then results can be exported.

Answer

Navigate to Microsoft 365 Defender portal and select Audit, then apply optional filters, then set the date range and select activities, then run the search and export results.

Answer

Navigate to Microsoft 365 Defender portal and select Audit, then set the date range and select activities, then run the search and export results, then apply optional filters.

Answer

Set the date range and select activities, then navigate to Microsoft 365 Defender portal and select Audit, then apply optional filters, then run the search and export results.

Question 12

Your organization uses Microsoft Purview Information Protection with sensitivity labels. Users complain that when they apply the 'Confidential' label to a document, the footer and header are not applied automatically. The label is configured to have a footer reading 'Confidential' and a header reading 'Sensitive'. What is the most likely cause?

Accepted Answer

The Microsoft 365 Apps for enterprise client is not configured to apply markings.. For sensitivity labels to apply visual markings (headers/footers) in Office apps, the client must support and be configured to apply them. Microsoft 365 Apps for enterprise (formerly Office 365 ProPlus) supports automatic labeling and markings, but older or misconfigured clients may not apply them. The most likely cause is that the client is not configured to apply markings, such as when the 'Enable Azure Information Protection' setting is disabled or the client version is outdated.

Answer

The label is configured with encryption, which prevents markings.

Answer

The label is not published to the users.

Answer

The sensitivity bar is disabled in the applications.

Question 13

Your organization uses Microsoft Purview Data Lifecycle Management to manage data retention. You need to retain all documents in a SharePoint site for 5 years and then allow users to delete them manually. Which THREE settings must be configured?

Accepted Answer

Specify the SharePoint site as the location.. Options A, B, and D are correct. To retain all documents in a SharePoint site for 5 years and allow manual deletion after the retention period, you must specify the SharePoint site as the location (A), set the retention period to 5 years and choose 'Start the retention period based on when items were last modified' (or similar) with 'No action' after the period (B), and select 'No' for the option that allows users to delete content within the retention period (D). Option C is incorrect because applying a default retention label to the document library is not required for a site-level retention policy; the policy can be applied directly to the site. Option E is incorrect because setting the retention period to 5 years and then deleting automatically would not allow manual deletion.

Answer

Apply a default retention label to the document library.

Answer

Set the retention period to 5 years and then delete automatically.

Question 14

Refer to the exhibit. You search the unified audit log and find an entry where the SecureScore changed from 75 to 80. Which Microsoft Purview feature is most likely responsible for this change?

Accepted Answer

An improvement action was implemented in Compliance Manager.. The Secure Score in Microsoft 365 is directly tied to improvement actions in Microsoft Purview Compliance Manager. When an improvement action is implemented, the tenant's compliance score (and the underlying Secure Score) increases. A change from 75 to 80 indicates that one or more improvement actions were completed, which is the most likely cause.

Answer

A sensitivity label was applied to a document.

Answer

A retention policy was modified.

Answer

A DLP policy was created.

Question 15

Your organization uses Microsoft Purview Records Management. You need to declare a document as a regulatory record. Which TWO conditions must be met?

Accepted Answer

The document must have a retention label that is configured to mark items as a regulatory record.. Option A is correct because declaring an item as a regulatory record requires a retention label whose label settings explicitly enable the 'Mark items as a regulatory record' option; this setting is what makes the label's retention immutable and prevents the record from being edited or deleted, even by administrators. Option C is correct because regulatory records can only be applied to content in supported workloads/locations, such as SharePoint Online sites, Exchange Online mailboxes, and OneDrive accounts, so the document must reside in a location that supports regulatory records. Option B is not required because an eDiscovery hold is a separate preservation mechanism and has nothing to do with regulatory record declaration. Option D is not required because a regulatory record label can have a finite retention period (for example, 7 years); indefinite retention is not a prerequisite. Option E is not required because Microsoft Purview Message Encryption is an email encryption feature and is unrelated to regulatory record labeling.

Answer

The document must be placed on an eDiscovery hold.

Answer

The retention period must be set to indefinite.

Answer

The document must be encrypted with Microsoft Purview Message Encryption.