MS-102 Manage compliance by using Microsoft Purview Practice Test 3 — 15 Questions

Question 1

Refer to the exhibit. You are configuring an auto-labeling policy in Microsoft Purview. The policy is set to apply the 'Confidential' label to documents that contain a specific sensitive info type. However, when a document is auto-labeled, users report that the footer and header are not applied. The label 'Confidential' itself does not have marking configurations. What is the most likely reason?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The marking defaults are defined in the policy but the label does not have markings configured.. The label 'Confidential' does not have any marking configurations (footer/header), so even though the auto-labeling policy applies the label, the markings are not applied. Option A is incorrect because the label being published to users is irrelevant for auto-labeling. Option B is incorrect because the Microsoft 365 Apps client setting affects client-side labeling, not server-side auto-labeling. Option D is incorrect because policy settings do not override label settings; the policy simply applies the label, and if the label lacks markings, no markings are added.

Answer

The label is not published to users.

Answer

The Microsoft 365 Apps client is not configured to apply markings.

Answer

The policy settings override the label settings, causing markings to be ignored.

Question 2

Your company uses Microsoft Purview to manage data classification. A user reports that a sensitive document is being blocked from external sharing even though the applied sensitivity label allows external sharing. The document is stored in SharePoint Online. What should you check first?

Accepted Answer

Check the DLP policies in Microsoft Purview compliance portal for any rules that block external sharing.. When a sensitivity label allows external sharing but a document is still blocked, the most likely cause is a DLP policy that overrides the label's sharing permissions. DLP policies in Microsoft Purview can block external sharing of content containing sensitive information, regardless of the sensitivity label. Therefore, checking DLP policies is the first step. Verifying label publication is less likely because the label is already applied and allows sharing. Retention policies do not block sharing. SharePoint external sharing settings could block sharing at the site level, but if the label allows it, the site setting might be overridden by the label, so DLP is more likely.

Answer

Verify that the sensitivity label is published to the user.

Answer

Confirm that the document is not under a retention policy.

Answer

Review the SharePoint external sharing settings for the site collection.

Question 3

Refer to the exhibit. You are reviewing a Microsoft Purview Data Lifecycle Management policy. A document labeled 'Personal Data' also contains EU_Deceased_Data. What is the retention outcome for this document?

Accepted Answer

The document is retained for 365 days, then deleted.. In Microsoft Purview Data Lifecycle Management, when multiple retention labels apply to a document, the principle of retention precedence determines the outcome. The label with the longest retention period wins, but if a label with a shorter retention period is also applied, the document is retained for the longer period and then deleted. Here, 'Personal Data' has a retention period of 365 days, while 'EU_Deceased_Data' likely has a shorter period (e.g., 90 days). The document will be retained for the longer period (365 days) and then deleted, as retention wins over deletion. Thus, option A is correct.

Answer

The document is deleted after 90 days.

Answer

The document is retained indefinitely because of conflicting rules.

Answer

The document is deleted immediately because it contains sensitive data.

Question 4

A company uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. They recently deployed Microsoft Copilot for Microsoft 365. Users can now ask Copilot to summarize documents that contain sensitive information. How should the company extend DLP protection to Copilot interactions?

Accepted Answer

Enable DLP for Copilot in the DLP policy settings.. Microsoft Purview DLP policies can be extended to cover Copilot for Microsoft 365 interactions by enabling the 'Copilot' workload in the DLP policy settings. Option A is incorrect because sensitivity labels can restrict access, but they do not provide DLP monitoring for Copilot. Option B is incorrect because Information Barriers restrict communication between specific groups but do not scan or block sensitive data in Copilot. Option D is incorrect because Communication Compliance is used to monitor communications for policy violations, not for DLP protection of Copilot interactions.

Answer

Apply a sensitivity label that restricts Copilot access.

Answer

Implement Information Barriers for Copilot.

Answer

Configure a Communication Compliance policy to monitor Copilot.

Question 5

A user has a document in SharePoint Online that is subject to a retention policy with a retention period of 5 years. The user attempts to delete the document but receives an error. What is the most likely reason?

Accepted Answer

The document is under a retention policy that preserves it.. Retention policies prevent users from permanently deleting documents during the retention period. Users can delete, but the document is retained in a preservation hold library. Option A is incorrect because DLP policies block sharing, not deletion. Option B is incorrect because sensitivity labels do not prevent deletion. Option C is incorrect because eDiscovery holds are legal holds, not retention policies, and the question explicitly states the document is subject to a retention policy.

Answer

A DLP policy blocks deletion of the document.

Answer

The document has a sensitivity label that prohibits deletion.

Answer

The document is under an eDiscovery hold.

Question 6

Which TWO Microsoft Purview solutions can be used to detect and prevent the unauthorized sharing of sensitive information in Microsoft Teams messages?

Accepted Answer

Communication Compliance. Communication Compliance (A) is correct because it uses machine learning and keyword/regex policies to detect inappropriate or sensitive content in Teams messages and can flag, alert on, and remediate policy violations, directly addressing unauthorized sharing. Data Loss Prevention (DLP) (E) is correct because Purview DLP policies for Teams detect sensitive information types and can block or warn on sharing of sensitive data in Teams chat and channel messages, actively preventing unauthorized sharing. eDiscovery (Premium) (B) is not a preventive control; it is used for identifying, preserving, collecting, and reviewing content for legal or investigative purposes after the fact. Sensitivity labels (C) classify and protect content (e.g., encryption, markings) but do not by themselves detect or block sharing in Teams messages. Information Barriers (D) restrict communication between defined groups to avoid conflicts of interest, not to detect sensitive information being shared.

Answer

eDiscovery (Premium)

Answer

Sensitivity labels

Answer

Information Barriers

Question 7

Refer to the exhibit. You run a Content Search in Microsoft Purview eDiscovery (Standard) for emails containing a specific keyword. The result shows one item in the DeletedItems folder. What is the most likely reason this email appears?

Accepted Answer

The email is in the Recoverable Items folder.. Content Search in Microsoft Purview eDiscovery (Standard) includes the Recoverable Items folder by default, which contains soft-deleted items. The item found in the DeletedItems folder is still recoverable because it is retained in the Recoverable Items folder (soft-deleted). Option B correctly identifies this. Option A is incorrect because permanently deleted items are not retained by retention policies in the mailbox; retention policies preserve items but do not retain permanently deleted items. Option C is incorrect because while the search includes DeletedItems by default, the question asks why the email appears, not why the search includes it. Option D is incorrect because there is no indication of an in-place hold.

Answer

The email was permanently deleted but retained by a retention policy.

Answer

The search includes deleted items by default.

Answer

The email is under an in-place hold.

Question 8

Your organization uses Microsoft Purview Records Management. You need to ensure that when a document is declared a record, it cannot be edited or deleted by users. Which type of record should you use?

Accepted Answer

Regulatory record. A regulatory record in Microsoft Purview Records Management is the strictest record type: once declared, it cannot be edited or deleted by users, and even administrators cannot remove the label without special procedures. It is designed for compliance with regulations that mandate immutability. This matches the requirement that the document cannot be edited or deleted.

Answer

Regular record

Answer

Standard record

Answer

Retention label with record setting

Question 9

Your organization uses Microsoft 365 E5 licenses. You need to configure retention labels to automatically retain emails related to ongoing litigation for 5 years and then delete them. The labels must be applied based on specific keywords in the email subject. What should you use?

Accepted Answer

Use an auto-apply retention label with a trainable classifier.. Use an auto-apply retention label with a trainable classifier. Auto-apply retention labels can use trainable classifiers to automatically apply labels based on keywords in the email subject, which satisfies the requirement for keyword-based retention and deletion. Option A is incorrect because a default retention label applies to all mailbox content, not based on keywords. Option B is incorrect because sensitivity labels focus on protection and classification, not retention. Option C is incorrect because a retention policy applies to all content in the location (e.g., all Exchange emails) and cannot filter by keywords. Therefore, D is the correct choice.

Answer

Configure a default retention label on the mailbox.

Answer

Deploy a sensitivity label with auto-labeling for Exchange.

Answer

Create a retention policy applied to Exchange email.

Question 10

Your organization uses Microsoft Purview Data Lifecycle Management. You need to ensure that after an employee leaves, their OneDrive content is retained for 7 years and then automatically deleted. The retention label must be applied automatically when the employee is marked as inactive in Microsoft Entra ID. What should you configure?

Accepted Answer

Create an auto-apply retention label with adaptive scope for inactive users.. An auto-apply retention label with an adaptive scope for inactive users automatically applies the label to OneDrive content when a user is marked as inactive in Microsoft Entra ID. The label can be configured to retain content for 7 years and then delete it, meeting the requirement without manual intervention.

Answer

Instruct users to manually apply a retention label to their OneDrive.

Answer

Configure a default retention label on the OneDrive library.

Answer

Create a retention policy for OneDrive with a 7-year retention period.

Question 11

Refer to the exhibit. You are a compliance administrator. You need to ensure that documents in the Project X site are retained for 365 days after the last modification and then deleted. The current configuration is shown. What is the outcome?

Accepted Answer

The label is applied automatically to all items in the site, retaining them for 365 days from last modification.. The exhibit shows a retention label configured with auto-apply conditions for the Project X site, with a retention period of 365 days from last modification and a disposition action of delete. Therefore, the label is applied automatically to all items in the site, retaining them for 365 days after last modification and then deleting them.

Answer

The label is applied only to new items, not existing.

Answer

The label is not applied automatically; users must apply it manually.

Answer

The label is applied, but the retention period starts from the creation date.

Question 12

Refer to the exhibit. You are configuring auto-labeling for sensitivity labels. The JSON snippet is part of the policy configuration. When a document containing a credit card number is detected, what will happen?

Accepted Answer

The document will be automatically encrypted.. The JSON policy snippet defines a rule that when a credit card number is detected, the action taken is 'encrypt'. Therefore, the document will be automatically encrypted. Option A is correct. Option B is incorrect because retention is not specified; the action is encryption, not retention. Option C is incorrect because no record marking is configured. Option D is incorrect because the action is encryption, not blocking sharing.

Answer

The document will be retained for a default period.

Answer

The document will be marked as a record.

Answer

The document will be blocked from sharing.

Question 13

Your organization uses Microsoft Purview Data Loss Prevention (DLP) policies to protect sensitive data. A user reports that they can still send credit card numbers via email despite the DLP policy being enabled. You verify that the policy is applied to the correct users and the rule includes the 'Credit Card Number' sensitive info type. What should you check next?

Accepted Answer

Check the priority of the DLP policy to ensure it is not overridden by a lower-priority policy that allows the action.. DLP policies often fail due to incorrect priority order; the policy with the highest priority (lowest number) is applied first. Option B is wrong because the condition is already present. Option C is wrong because the policy is already enabled. Option D is wrong because end-user notifications are for policy tips, not enforcement.

Answer

Disable and re-enable the DLP policy to refresh its rules.

Answer

Add the 'Credit Card Number' sensitive info type to the policy rule again.

Answer

Configure end-user notifications for the DLP policy.

Question 14

Contoso Ltd. uses Microsoft Purview to manage compliance for sensitive data across Microsoft 365 and Azure. They need to ensure that all documents containing personally identifiable information (PII) are automatically labeled with a 'Highly Confidential' sensitivity label. The solution must also require users to justify access to these labeled documents. Which two actions should you configure?

Accepted Answer

Create a Microsoft Purview auto-labeling policy for sensitivity labels.. Microsoft Purview auto-labeling policies can automatically apply sensitivity labels to documents containing PII, such as a 'Highly Confidential' label. Option E is correct because configuring the sensitivity label with rights management protection and enabling the 'Justify access' option ensures that users must provide a justification before accessing labeled documents. Options A, C, and D are incorrect because retention labels do not enforce access justification, DLP policies block sharing but do not require justification, and audit logging tracks events but does not enforce justification.

Answer

Configure a retention label to mark documents as 'Highly Confidential'.

Answer

Create a DLP policy that blocks sharing of unlabeled documents.

Answer

Enable Microsoft Purview Audit (Standard) to log access to sensitive documents.

Question 15

Your organization has a Microsoft Purview data classification policy that automatically applies a 'General' label to all documents. However, users are complaining that the label is not being applied to documents stored in SharePoint Online. You confirm that the policy is configured correctly and the license is assigned. What is the most likely cause?

Accepted Answer

The auto-labeling policy is not configured to scan SharePoint Online.. The auto-labeling policy must be configured to scan specific locations, including SharePoint Online. If scanning is not enabled for SharePoint, the policy will not apply labels to documents stored there. Option A is incorrect because the label is already published; user assignment is not required for auto-labeling. Option B is incorrect because the policy is enabled as confirmed in the scenario. Option C is incorrect because sensitivity labels can be configured without encryption, and encryption does not prevent label application.

Answer

The sensitivity label is not published to the users.

Answer

The auto-labeling policy is disabled.

Answer

The sensitivity label requires encryption and the users don't have the encryption key.