MS-102 Manage compliance by using Microsoft Purview Practice Test 4 — 15 Questions

Question 1

Your company uses Microsoft Purview to manage compliance. You need to ensure that only users who have passed a training course can access documents labeled 'Confidential'. The solution must enforce this dynamically without manual intervention. What should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft Entra ID Conditional Access policy with a terms of use requiring training acknowledgment.. Microsoft Entra ID Conditional Access can require terms of use acceptance (which can include training acknowledgment) before accessing labeled content. Option A is wrong because DLP doesn't enforce user training. Option B is wrong because labels don't enforce training. Option C is wrong because privileged access management is for administrative roles, not document access.

Answer

Microsoft Purview Privileged Access Management to require approval for access.

Answer

A Microsoft Purview DLP policy that blocks access for untrained users.

Answer

A Microsoft Purview sensitivity label with a custom permission that only allows trained users.

Question 2

Your organization is required to retain all financial records for seven years. Which Microsoft Purview solution should you use to enforce this requirement?

Accepted Answer

Microsoft Purview retention policies. Retention policies in Microsoft Purview are specifically designed to enforce data retention requirements for a defined period, such as seven years for financial records. Option A is incorrect because Data Loss Prevention (DLP) focuses on preventing unauthorized sharing or leakage of sensitive data, not on retaining data. Option B is incorrect because Records Management is a broader capability that includes declaring records and managing disposition, but the specific tool for enforcing retention based on time is retention policies. Option D is incorrect because Microsoft Purview Audit tracks user and admin activities for compliance investigations, but it does not enforce data retention.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Records Management

Answer

Microsoft Purview Audit

Question 3

Your organization has a Microsoft Purview auto-labeling policy that applies a 'Highly Confidential' label to emails containing 'Social Security Number'. The policy is configured to label emails when they are sent. However, some emails are still being sent without the label. What should you verify first?

Accepted Answer

That the auto-labeling policy is configured to apply the label at the time of sending.. The auto-labeling policy must be configured to apply the label at send time; if it is set to apply only when the email is saved or as a recommendation, it will not label automatically during send. Option A is incorrect because the policy being enabled does not guarantee it applies at send. Option C is incorrect because the SSN sensitive info type is likely correctly defined if it matches the content. Option D is incorrect because priority determines which policy applies when multiple policies match, not whether labeling occurs at send.

Answer

That the auto-labeling policy is enabled.

Answer

That the 'Social Security Number' sensitive info type is correctly defined.

Answer

That the auto-labeling policy has the highest priority.

Question 4

Your company uses Microsoft Purview to manage compliance. You need to ensure that only users who have passed a training course can access documents labeled 'Confidential'. The solution must enforce this dynamically without manual intervention. What should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft Entra ID Access Reviews with a connected organization. Microsoft Entra ID Access Reviews, when integrated with a connected organization, can create approval workflows for access requests to documents labeled 'Confidential'. Option A is wrong because Privileged Access Management is for managing just-in-time access to elevated admin roles, not document access. Option B is wrong because Data Loss Prevention (DLP) policies prevent data leakage but do not handle access requests. Option D is wrong because sensitivity labels with custom permissions allow users to apply permissions, but they do not include approval workflows for manager approval.

Answer

Microsoft Purview Privileged Access Management

Answer

Microsoft Purview Data Loss Prevention with a custom policy

Answer

Microsoft Purview sensitivity label with a custom permission

Question 5

Your organization uses Microsoft Purview to manage compliance. You need to ensure that all documents containing 'Project X' are automatically retained for 5 years. Which solution should you use?

Accepted Answer

Microsoft Purview retention policies with adaptive scopes. Microsoft Purview retention policies with adaptive scopes allow you to automatically retain content based on conditions such as sensitive information types or specific keywords. In this scenario, you can create a retention policy with an adaptive scope that targets documents containing 'Project X' and set the retention period to 5 years. Option A is wrong because sensitivity labels are used for classification and protection, not directly for automated retention based on content. Option B is wrong because Audit tracks user and admin activities, not retention enforcement. Option C is wrong because Data Loss Prevention (DLP) prevents data leakage, not retention.

Answer

Microsoft Purview sensitivity labels

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Data Loss Prevention

Question 6

Refer to the exhibit. You are configuring Microsoft Purview Records Management. You have a document that is classified under 'Finance' department and 'Invoices' category. Which retention label will be applied if both labels are auto-applied based on the same condition?

Accepted Answer

Finance Retention. When multiple retention labels are auto-applied based on the same condition, the label with the highest priority (or the one that is most specific) is applied. In this case, the Finance Retention label is applied because it is associated with the 'Finance' department and 'Invoices' category, which likely takes precedence over a generic HR label. Microsoft Purview applies a single retention label per item; if multiple labels match, the system uses the order of the auto-apply policies or the label priority to determine which one wins.

Answer

Both labels will be applied, causing a conflict.

Answer

HR Retention

Answer

No label will be applied because of the conflict.

Question 7

Your organization uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. Users report that they are unable to share files containing credit card numbers via email. You need to allow sharing with specific business partners while maintaining protection for all other recipients. What should you configure?

Accepted Answer

Configure the DLP policy to allow users to override the action with a business justification.. Microsoft Purview DLP policies can be configured to allow users to override a blocking action by providing a business justification. This is useful for scenarios where legitimate sharing with business partners is needed while still blocking sharing with unauthorized recipients. The override action can be audited for compliance. Option B is incorrect because DLP policies are evaluated in priority order; a lower priority policy cannot override a higher priority policy's action. Option C is incorrect because sensitivity labels classify and protect data but do not override DLP policy actions. Option D is incorrect because file policies in Microsoft Purview Information Protection are not used for email content inspection; DLP policies are used for that purpose.

Answer

Create a separate DLP policy with lower priority that allows sharing with the partners.

Answer

Assign a custom sensitivity label to emails sent to the partners.

Answer

Configure a file policy in Microsoft Purview Information Protection to exempt the partners.

Question 8

Your organization uses Microsoft Purview Data Lifecycle Management and has a retention policy that retains all SharePoint documents for three years. However, for a specific research project, you need to retain documents for five years after the project ends. Some documents are already marked with a different retention label. What should you do?

Accepted Answer

Apply a retention label with a five-year retention period to the research documents.. Retention labels in Microsoft Purview take precedence over retention policies when they are more specific or when they are applied directly to content. Applying a five-year retention label to the research documents ensures they are retained for five years after the project ends, overriding the three-year policy. This is the designed mechanism for per-item retention exceptions.

Answer

Modify the existing retention policy to exclude the research project site.

Answer

Remove the existing retention labels from the research documents and rely on the policy.

Answer

Create a new retention policy that applies to the research project site and set the retention period to five years.

Question 9

Your organization uses Microsoft Purview Audit (Standard) for auditing user activity. You receive an alert that a user accessed sensitive files in SharePoint Online. You need to investigate the exact actions performed by the user. Which action should you take?

Accepted Answer

Enable Audit (Premium) licensing for the user and then search the audit log.. Audit (Standard) only retains audit logs for 90 days and does not include detailed file-level operations like item access. You would need to upgrade to Audit (Premium) to get those details. Option A is incorrect because the Search-UnifiedAuditLog cmdlet works with both editions but may not show item-level details in Standard. Option B is incorrect because although the Audit Log Search tab exists in the Purview portal, with Audit (Standard) it does not log detailed file operations like accessing specific files; you need Audit (Premium) for that. Option D is incorrect because Compliance Manager is used for managing compliance frameworks and assessments, not for reviewing audit logs.

Answer

Run the Search-UnifiedAuditLog cmdlet in Exchange Online PowerShell.

Answer

Navigate to the Microsoft Purview portal and use the Audit Log Search tab.

Answer

Access Microsoft Purview Compliance Manager and review the user's activity.

Question 10

A company uses Microsoft Purview Information Protection to classify and protect sensitive data. They have configured auto-labeling policies for Microsoft 365 apps. However, users report that some documents containing credit card numbers are not being labeled automatically. You verify that the sensitive info type for credit cards is correctly defined. What is the most likely cause?

Accepted Answer

The documents are stored in on-premises file shares, not in SharePoint or OneDrive.. Auto-labeling policies can only label documents that are stored in Microsoft 365 (SharePoint Online, OneDrive for Business) or Exchange Online, not on-premises file shares. Option A is incorrect because auto-labeling is not limited to Word, Excel, PowerPoint; it also works for other formats. Option C is incorrect because sensitivity labels can be configured for auto-labeling. Option D is incorrect because the DLP policy does not affect auto-labeling.

Answer

The auto-labeling policy only applies to Word, Excel, and PowerPoint files.

Answer

The sensitivity label used for auto-labeling is not published to users.

Answer

The DLP policy for credit cards is blocking the auto-labeling process.

Question 11

Your organization uses Microsoft Purview Communication Compliance to detect inappropriate messages in Microsoft Teams. You need to define policies that automatically detect and review messages containing profanity or harassment. Which built-in classifier should you use?

Accepted Answer

Harassment classifier. The 'Harassment' classifier is specifically designed to detect harassing or threatening language in Microsoft Teams. Option C is incorrect because the 'Profanity' classifier only detects swear words, not harassment. Option B is incorrect because the 'Sensitive info types' classifier detects sensitive data like credit cards, not harassment. Option D is incorrect because the 'Threat' classifier detects threats, which is narrower than harassment.

Answer

Sensitive info types classifier

Answer

Profanity classifier

Answer

Threat classifier

Question 12

Which THREE components are required to implement Microsoft Purview Data Lifecycle Management for Microsoft 365? (Choose three.)

Accepted Answer

Retention labels. Retention labels (A) are a core component of Microsoft Purview Data Lifecycle Management because they let you classify content and specify how long items are kept and what happens when the retention period expires, including disposition review. Retention policies (B) are also required, as they apply retention settings at the workload or location level (for example, Exchange mailboxes, SharePoint sites, OneDrive accounts, and Teams) without requiring item-level labeling. The file plan (E) is the management interface used in Records Management/Data Lifecycle Management to create, organize, and manage retention labels, including their retention and disposition settings, so it is a necessary component for implementing the solution. Sensitivity labels (C) belong to Microsoft Purview Information Protection and handle encryption and content marking, not retention or deletion. Data loss prevention policies (D) belong to Microsoft Purview Data Loss Prevention and prevent sharing or leakage of sensitive data, which is a different capability from lifecycle retention.

Answer

Sensitivity labels

Answer

Data loss prevention policies

Question 13

Which TWO types of content can be reviewed using Microsoft Purview Communication Compliance? (Choose two.)

Accepted Answer

Exchange Online emails. Options A and D are correct because Microsoft Purview Communication Compliance can monitor Exchange Online emails and Yammer private messages for policy violations. Option B is incorrect because while Microsoft Teams chat messages are also monitored, they are not selected as one of the two in this question. Options C and E are incorrect: SharePoint Online files are not directly reviewed by Communication Compliance, and Viva Engage conversations are not supported as standalone sources.

Answer

Files stored in SharePoint Online

Answer

Yammer private messages

Answer

Viva Engage conversations

Question 14

Refer to the exhibit. You are a Microsoft Purview administrator. The exhibit shows the configuration of a sensitivity label. Users report that when they create a document containing a credit card number, the label is automatically applied, but the document is not encrypted. What is the most likely cause?

Accepted Answer

Auto-labeling does not apply encryption; encryption is only applied when the label is applied manually or via a client-side policy.. Auto-labeling in Microsoft Purview (server-side) does not automatically encrypt documents. Encryption via sensitivity labels is only applied when the label is applied manually by the user or through client-side auto-labeling (e.g., in Office apps). In this scenario, the auto-labeling is likely server-side, which applies the label but cannot enforce encryption. Therefore, option A is correct. Option B is incorrect because auto-labeling is enabled for the label (as shown in the exhibit). Option C is incorrect because a valid Rights Management template ID may be configured, but encryption is not applied due to the auto-labeling method. Option D is incorrect because the encryption setting is enabled in the label configuration.

Answer

Auto-labeling is not enabled for the label.

Answer

The Rights Management template ID is missing or invalid.

Answer

The encryption setting is not enabled in the label configuration.

Question 15

Your organization uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. You have a DLP policy that blocks sharing of documents containing personally identifiable information (PII) with external users. However, the HR department needs to share PII with a third-party benefits administrator for open enrollment. They request an exception that allows sharing only with the specific external domain 'benefits.contoso.com'. You need to implement the exception without weakening the overall policy. The solution must be centrally managed and auditable. What should you do?

Accepted Answer

Configure the existing DLP policy to allow override for the specific external domain by using an allow list.. You can configure an override in the existing DLP policy to allow sharing with the specific external domain 'benefits.contoso.com' by adding that domain to an allow list. This creates a centrally managed, auditable exception without weakening the overall policy. Option A is incorrect because creating a separate DLP policy with lower priority does not create an exception; all policies apply and may still block the sharing. Option B is incorrect because removing the HR department from the scope would disable all DLP protection for HR data, not just for the specific scenario. Option C is incorrect because modifying the sensitivity label affects encryption and classification, not DLP policy actions directly.

Answer

Create a separate DLP policy with a lower priority that allows sharing with the external domain.

Answer

Remove the HR department from the scope of the DLP policy.

Answer

Modify the sensitivity label used by HR to remove the encryption requirement.