MS-102 Manage compliance by using Microsoft Purview Practice Test 3 — 15 Questions

Question 1

An administrator is creating a Microsoft Purview auto-labeling policy for documents containing personally identifiable information. Before turning the policy on automatically, what should the administrator do to reduce false positives?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Run the auto-labeling policy in simulation mode and review matches. Running the auto-labeling policy in simulation mode allows the administrator to review which documents would be matched by the policy without actually applying labels. This enables analysis of the detection results to identify and reduce false positives before enabling automatic application, ensuring the policy accurately targets only documents containing the specified PII.

Answer

Publish the label directly to all users and enable automatic application immediately

Answer

Create an eDiscovery hold for the SharePoint locations

Answer

Configure a retention policy before creating the sensitivity label

Question 2

A compliance officer needs to prevent users from sharing documents that have been labeled 'Highly Confidential' with external users. When a user attempts to share such a document externally, the action should be blocked and the user should see a policy tip. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Data Loss Prevention (DLP) policy. A Data Loss Prevention (DLP) policy is the correct solution because it can inspect content and context (including sensitivity labels) to enforce rules that block external sharing of documents labeled 'Highly Confidential' and display a policy tip to the user. DLP policies in Microsoft Purview are specifically designed to prevent accidental or intentional data leakage by monitoring and controlling sharing actions in real time.

Answer

Sensitivity label encryption

Answer

Retention policy

Answer

Records management

Question 3

A company uses Microsoft Purview Data Lifecycle Management. They have a retention policy that retains all documents in a specific SharePoint Online site for 5 years and then automatically deletes them. Some documents in that site have a retention label that retains them for 7 years and then deletes them. What is the effective retention period for those labeled documents?

Accepted Answer

7 years. When a retention label is applied to a document, it takes precedence over a retention policy at the item level. The label's retention setting (7 years) overrides the site-level policy (5 years), so the effective retention period for the labeled documents is 7 years, after which they are automatically deleted.

Answer

5 years

Answer

The documents are retained indefinitely due to conflict

Answer

The documents are retained for 5 years and then archived

Question 4

A compliance officer needs to mark documents in a SharePoint Online library as regulatory records. These records must be immutable (cannot be modified or deleted) for 3 years. After 3 years, a disposition review must be initiated to decide if the records can be deleted. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Retention label configured to mark items as records with a retention period of 3 years and disposition review. A retention label configured to mark items as regulatory records enforces immutability (no modification or deletion) for the specified retention period of 3 years. After the retention period expires, the disposition review triggers a workflow where a reviewer must approve or reject deletion, meeting the compliance officer's requirement exactly.

Answer

Data Lifecycle Management retention policy with disposition review

Answer

Sensitivity label with encryption

Answer

eDiscovery case with hold

Question 5

A compliance officer needs to automatically apply a retention label to all documents in a SharePoint Online site that have not been modified for more than 3 years. The label should retain the documents for an additional 5 years, then trigger a disposition review. Which action should the officer configure in the auto-apply retention label policy?

Accepted Answer

Configure a condition that detects 'Last Modified Date' is older than 3 years. The auto-apply retention label policy in Microsoft Purview can use a KQL-based condition to detect documents where the 'Last Modified Date' is older than 3 years. This triggers the label to retain the documents for 5 additional years and then initiate a disposition review, meeting the compliance officer's requirement exactly.

Answer

Configure a condition that detects 'Created Date' is older than 3 years

Answer

Select the retention label and manually publish to the site, then use a Power Automate flow to apply the label

Answer

Create a data lifecycle management policy using a query for documents created before a certain date

Question 6

A compliance officer needs to implement a policy that automatically marks emails containing a specific custom sensitive information type as a regulatory record upon sending. The regulatory record must be retained for 10 years and cannot be deleted by users. Which two components must be configured to achieve this?

Accepted Answer

Create a custom sensitive information type and configure an auto-apply retention label policy that applies a regulatory record label. To automatically mark emails containing a specific custom sensitive information type as a regulatory record, you need a custom sensitive information type to detect the pattern and an auto-apply retention label policy that applies a regulatory record label. Option A covers both components: the custom sensitive information type and the auto-apply policy. Option B is incorrect because a default retention label applied via a retention policy to all mailboxes does not detect content patterns—it applies uniformly to all emails regardless of content, and does not automatically mark as a regulatory record based on content. Options C and D are also incorrect: C requires manual user action, and D only blocks emails without applying a label.

Answer

Create a default retention label for emails and assign it to all mailboxes via a retention policy

Answer

Create a retention label with record marking and publish it to all users, then train users to apply it manually

Answer

Create a Data Loss Prevention (DLP) policy that detects the custom pattern and blocks the email until it is labeled

Question 7

You are the Microsoft 365 administrator for Contoso Ltd. The compliance team needs to implement data lifecycle management and records management using Microsoft Purview. Which three of the following actions should you take to meet these requirements? (Choose three.)

Accepted Answer

Configure a file plan for records management to define retention schedules and disposal reviews.. To meet data lifecycle management and records management requirements: (1) Publishing retention labels allows users to manually apply them to items in SharePoint and OneDrive, enabling user-driven classification and retention. (2) Configuring a file plan for records management defines retention schedules and disposal reviews, which is essential for records management. (3) Creating retention labels that automatically apply a retention policy to documents containing PII leverages sensitive information types for automated classification and lifecycle management without user intervention. DLP policies focus on preventing data loss, not deletion schedules; Compliance Manager assesses compliance posture; audit logging does not enforce retention periods.

Answer

Enable audit logging to automatically enforce retention periods for all Microsoft 365 workloads.

Answer

Use data loss prevention (DLP) policies to automatically delete emails containing credit card numbers after 30 days.

Answer

Deploy Microsoft Purview Compliance Manager to automate the deletion of stale data in Exchange Online.

Question 8

Drag and drop the steps to configure Data Loss Prevention (DLP) policies in Microsoft Purview in the correct order.

Accepted Answer

Create DLP policy, Define conditions and actions, Test the policy, Deploy the policy. DLP policies are created in Purview, conditions and actions defined, and then deployed after testing.

Answer

Define conditions and actions, Create DLP policy, Test the policy, Deploy the policy

Answer

Create DLP policy, Define conditions and actions, Deploy the policy, Test the policy

Answer

Create DLP policy, Test the policy, Define conditions and actions, Deploy the policy

Question 9

Drag and drop the steps to configure Microsoft 365 audit log search in the correct order.

Accepted Answer

Navigate to Microsoft 365 Defender portal and select Audit, then set the date range and select activities, then apply optional filters, then run the search and export results.. Audit log search is performed in Defender with date range, activities, and optional filters, then results can be exported.

Answer

Navigate to Microsoft 365 Defender portal and select Audit, then apply optional filters, then set the date range and select activities, then run the search and export results.

Answer

Navigate to Microsoft 365 Defender portal and select Audit, then set the date range and select activities, then run the search and export results, then apply optional filters.

Answer

Set the date range and select activities, then navigate to Microsoft 365 Defender portal and select Audit, then apply optional filters, then run the search and export results.

Question 10

Match each Microsoft 365 migration tool to its use case.

Accepted Answer

Exchange Migration (cutover): Migrate entire on-premises Exchange organization to Exchange Online in a single batch. Correct matches: Exchange Migration (cutover) migrates entire on-premises Exchange organization; SPMT migrates files and SharePoint content; Mover migrates files from cloud storage; Azure AD Connect synchronizes identities. Common confusions include mixing the purpose of Mover with Exchange migration and SPMT with identity synchronization.

Answer

Exchange Migration (cutover): Migrate files from cloud storage providers to OneDrive

Answer

SharePoint Migration Tool: Synchronize on-premises identities

Question 11

Your organization uses Microsoft Purview to enforce data loss prevention (DLP) policies. Users report that a DLP policy blocks legitimate sharing of a document containing sensitive financial data. You need to allow the sharing while still protecting the data. What should you do?

Accepted Answer

Configure a policy tip to allow override with a business justification.. Configuring a policy tip to allow override with a business justification enables users to legitimately share the document while still being audited. Policy tips notify users when their action violates a DLP policy and allow them to override with a justification, which is logged for review. Option A is wrong because disabling the policy removes protection entirely. Option B is wrong because adding a user to a super user group bypasses all DLP checks, which is not appropriate. Option C is wrong because excluding the document type could weaken protection for all similar documents.

Answer

Disable the DLP policy and create a new one with broader conditions.

Answer

Add the user to the DLP policy's super user group.

Answer

Modify the DLP policy to exclude the specific document type.

Question 12

A company needs to automatically retain all emails sent to or from external partners for 7 years. They also need to ensure that after 7 years, the emails are permanently deleted. What should you configure in Microsoft Purview?

Accepted Answer

Create a retention policy for Exchange email with a retention period of 7 years, followed by deletion.. A retention policy for Exchange email can be configured to retain items for 7 years and then permanently delete them, meeting both requirements automatically for all emails to/from external partners. Option A is incorrect because retention labels require manual application or auto-labeling rules, which are not automatic for all emails and may not cover all partner communications. Option C is incorrect because an eDiscovery hold preserves content indefinitely and does not delete after a set period. Option D is incorrect because DLP policies prevent data loss but do not manage retention or deletion.

Answer

Create a retention label with a retention period of 7 years and publish it to all users.

Answer

Create an eDiscovery hold for all external partner communications.

Answer

Create a data loss prevention (DLP) policy to block deletion of emails after 7 years.

Question 13

Your organization uses Microsoft Purview Information Protection with sensitivity labels. Users complain that when they apply the 'Confidential' label to a document, the footer and header are not applied automatically. The label is configured to have a footer reading 'Confidential' and a header reading 'Sensitive'. What is the most likely cause?

Accepted Answer

The Microsoft 365 Apps for enterprise client is not configured to apply markings.. For headers and footers defined in a sensitivity label to be applied automatically when the label is applied, the Microsoft 365 Apps for enterprise client must be configured to apply these markings. Without this client configuration, the labeling action will not trigger the automatic addition of header/footer content.

Option A is incorrect because encryption does not prevent markings; markings can coexist with encryption.

Option B is incorrect because if the label were not published, users would not see it at all to apply it.

Option C is incorrect because disabling the sensitivity bar would prevent users from selecting labels, but the question states users can apply the label, so the bar is functional; the issue is that markings are not applied, which is a client configuration matter.

Answer

The label is configured with encryption, which prevents markings.

Answer

The label is not published to the users.

Answer

The sensitivity bar is disabled in the applications.

Question 14

Your organization uses Microsoft Purview Compliance Manager to manage compliance activities. Which TWO actions can be performed directly from Compliance Manager?

Accepted Answer

Assign an improvement action to a user.. Compliance Manager is a solution within Microsoft Purview that provides a centralized dashboard for managing compliance activities. It allows you to assign improvement actions to specific users to track responsibility and progress, and to upload evidence files directly to an improvement action to demonstrate compliance with a control. These are core, direct functions of the Compliance Manager interface.

Answer

View and manage DLP alerts.

Answer

Create a retention policy for Exchange Online.

Answer

Create a sensitivity label.

Question 15

Your organization uses Microsoft Purview Data Lifecycle Management to manage data retention. You need to retain all documents in a SharePoint site for 5 years and then allow users to delete them manually. Which THREE settings must be configured?

Accepted Answer

Specify the SharePoint site as the location.. Options A, B, and D are correct. To retain all documents in a SharePoint site for 5 years and allow manual deletion after the retention period, you must specify the SharePoint site as the location (A), set the retention period to 5 years and choose 'Start the retention period based on when items were last modified' (or similar) with 'No action' after the period (B), and select 'No' for the option that allows users to delete content within the retention period (D). Option C is incorrect because applying a default retention label to the document library is not required for a site-level retention policy; the policy can be applied directly to the site. Option E is incorrect because setting the retention period to 5 years and then deleting automatically would not allow manual deletion.

Answer

Apply a default retention label to the document library.

Answer

Set the retention period to 5 years and then delete automatically.