MS-102 Manage compliance by using Microsoft Purview Practice Test 4 — 15 Questions

Question 1

Your company is implementing Microsoft Purview Data Loss Prevention (DLP) to protect credit card numbers in emails. Which THREE actions can a DLP policy take when a match is found?

Accepted Answer

Allow the user to override the block with a business justification.. Options C, D, and E are correct actions that a DLP policy can take when a credit card number match is found. DLP can block the email from being sent (E), send a notification with a policy tip to the user (D), and allow the user to override the block with a business justification (C). Option A is incorrect because DLP does not delete emails from recipients' inboxes; it can block or quarantine at the transport level. Option B is incorrect because while DLP can encrypt emails via rights management, it is not a standard 'action' but an additional protection; the question asks for standard actions that DLP can take directly.

Answer

Delete the email from the recipient's inbox.

Answer

Encrypt the email automatically.

Question 2

Refer to the exhibit. You are reviewing a Microsoft Purview auto-labeling policy configuration. The SensitivityTypes GUID corresponds to a sensitive info type that detects credit card numbers. The LabelId is for a 'Confidential' label. Users report that documents containing credit card numbers are not being automatically labeled. What is the most likely reason?

Accepted Answer

The auto-labeling policy is not scoped to the correct locations (e.g., SharePoint, Exchange).. The exhibit shows the condition is set to 'AllUsers', which means all users are targeted, but the label assignment method is 'Automatic' with a condition. However, the policy might not have been configured to apply to locations like SharePoint or Exchange. Option A is wrong because the sensitive info type is correct. Option B is wrong because automatic labeling does not require a user license for the label. Option C is wrong because the label is published if it's in the policy.

Answer

The 'Confidential' label is not published to users.

Answer

The sensitive info type GUID is incorrect.

Answer

Users do not have the appropriate license for auto-labeling.

Question 3

Refer to the exhibit. You run the Get-RetentionCompliancePolicy cmdlet and see the output. Your organization wants to retain all ProjectX documents for 10 years and then allow users to delete them. However, users complain that documents are being deleted automatically. What is the issue?

Accepted Answer

The policy is disabled, so it should not be enforcing.. The policy is disabled (Enabled: False), so it is not enforcing any retention or deletion actions. However, users are complaining that documents are being deleted automatically, which cannot be caused by this disabled policy. The issue is likely another policy or process. Option A is incorrect because even if the retention action is 'Delete', it has no effect since the policy is disabled. Option C is incorrect because Mode 'Enable' means the policy is active when enabled, but since it is disabled, mode is irrelevant. Option D is incorrect because 'DateCreated' is a valid retention trigger.

Answer

The retention action is set to Delete instead of NoAction.

Answer

The mode is set to Enable, which means the policy is in test mode.

Answer

The retention trigger is set to DateCreated, which is incorrect.

Question 4

Refer to the exhibit. You search the unified audit log and find an entry where the SecureScore changed from 75 to 80. Which Microsoft Purview feature is most likely responsible for this change?

Accepted Answer

An improvement action was implemented in Compliance Manager.. Compliance Manager calculates and updates the secure score based on improvement actions implemented. Option A is wrong because applying a sensitivity label does not directly change the secure score. Option B is wrong because modifying a retention policy does not directly update the secure score. Option C is wrong because creating a DLP policy does not directly affect the secure score.

Answer

A sensitivity label was applied to a document.

Answer

A retention policy was modified.

Answer

A DLP policy was created.

Question 5

Your organization uses Microsoft Purview eDiscovery (Premium) for a legal investigation. You need to collect data from Microsoft Teams chat messages and channel conversations. The case manager wants to search for specific keywords and exclude irrelevant content. What should you do?

Accepted Answer

Create a collection in eDiscovery (Premium) with a KQL query to search Teams data.. EDiscovery (Premium) collections allow searching Microsoft Teams chat messages and channel conversations using KQL queries with conditions to include specific keywords and exclude irrelevant content. Option A is incorrect because Content Search (Standard) is less powerful and lacks advanced filtering capabilities for Teams data. Option B is incorrect because DLP policies are designed for data loss prevention, not legal discovery. Option C is incorrect because Communication Compliance is for monitoring communications, not for eDiscovery searches.

Answer

Use Content Search (Standard) with keyword queries.

Answer

Create a DLP policy to capture matching content.

Answer

Use Communication Compliance to review messages.

Question 6

Your organization is implementing Microsoft Purview Communication Compliance to detect potential insider trading. You need to scan internal emails for specific patterns and assign reviewers from the legal team. What is the minimum number of policies required?

Accepted Answer

One policy with multiple conditions.. A single Communication Compliance policy can contain multiple conditions (e.g., multiple keywords or patterns) and assign reviewers from the legal team. There is no need for separate policies for patterns, reviewers, or storage; all can be configured within one policy. Option B is incorrect because three policies are not necessary; one policy suffices. Option C is incorrect because Communication Compliance does support custom policies with specific conditions. Option D is incorrect because one policy can handle multiple patterns.

Answer

Three policies: one for patterns, one for reviewers, and one for storage.

Answer

Zero, as Communication Compliance does not support custom policies.

Answer

Two policies: one for each pattern.

Question 7

A user in your organization receives a 'Message blocked' notification when trying to send an email with a credit card number. The DLP policy is configured to block such emails. The user claims the credit card number is a valid test number used for training. What should you do to allow the email while maintaining security?

Accepted Answer

Configure a policy tip to allow override with a business justification.. Configuring a policy tip with override allows the user to justify the override with a business justification, which is audited. This maintains security by notifying the user and recording the override for compliance. Option B (excluding the user) removes DLP protection entirely for that user, which is insecure. Option C (disabling the policy) disables protection for all users. Option D (adding to super user group) bypasses all DLP checks for the user, which is too permissive.

Answer

Exclude the user from the DLP policy.

Answer

Disable the DLP policy temporarily.

Answer

Add the user to the DLP policy's super user group.

Question 8

Your organization uses Microsoft Purview Records Management. You need to declare a document as a regulatory record. Which TWO conditions must be met?

Accepted Answer

The document must have a retention label that is configured to mark items as a regulatory record.. Options A and C are correct because regulatory records require a retention label configured to mark items as a regulatory record, and the document must be stored in a location that supports regulatory records, such as SharePoint Online. Option B is incorrect because an eDiscovery hold is not required for regulatory records; it is a separate legal hold process. Option D is incorrect because the retention period does not need to be indefinite; it can be a specific period. Option E is incorrect because Microsoft Purview Message Encryption is not a prerequisite for regulatory records.

Answer

The document must be placed on an eDiscovery hold.

Answer

The retention period must be set to indefinite.

Answer

The document must be encrypted with Microsoft Purview Message Encryption.

Question 9

Refer to the exhibit. You are configuring an auto-labeling policy in Microsoft Purview. The policy is set to apply the 'Confidential' label to documents that contain a specific sensitive info type. However, when a document is auto-labeled, users report that the footer and header are not applied. The label 'Confidential' itself does not have marking configurations. What is the most likely reason?

Accepted Answer

The marking defaults are defined in the policy but the label does not have markings configured.. The label 'Confidential' does not have any marking configurations (footer/header), so even though the auto-labeling policy applies the label, the markings are not applied. Option A is incorrect because the label being published to users is irrelevant for auto-labeling. Option B is incorrect because the Microsoft 365 Apps client setting affects client-side labeling, not server-side auto-labeling. Option D is incorrect because policy settings do not override label settings; the policy simply applies the label, and if the label lacks markings, no markings are added.

Answer

The label is not published to users.

Answer

The Microsoft 365 Apps client is not configured to apply markings.

Answer

The policy settings override the label settings, causing markings to be ignored.

Question 10

Your organization uses Microsoft Purview Data Lifecycle Management. You need to review the disposition of content that has reached the end of its retention period. What should you configure?

Accepted Answer

Enable disposition review in the retention policy or label.. Disposition review allows managers to review content before permanent deletion. Option A is wrong because DLP policies are not used for disposition review; they are for preventing data loss. Option B is wrong because eDiscovery holds preserve content, not enable disposition review. Option D is wrong because creating a retention label with a retention period alone does not enable disposition review; you must configure disposition review in the label policy.

Answer

Create a DLP policy to notify administrators.

Answer

Place the content on an eDiscovery hold.

Answer

Create a retention label with a retention period.

Question 11

Your company uses Microsoft Purview to manage data classification. A user reports that a sensitive document is being blocked from external sharing even though the applied sensitivity label allows external sharing. The document is stored in SharePoint Online. What should you check first?

Accepted Answer

Check the DLP policies in Microsoft Purview compliance portal for any rules that block external sharing.. The issue is that external sharing is blocked despite a permissive label. This is often caused by a restrictive data loss prevention (DLP) policy overriding the label. Checking DLP policies is the first step. Option A is wrong because sensitivity labels define encryption and marking, not sharing permissions directly. Option C is wrong because retention policies do not control sharing. Option D is wrong because SharePoint sharing settings are tenant-wide and affect all content; however, the more immediate cause is a DLP policy overriding the label.

Answer

Verify that the sensitivity label is published to the user.

Answer

Confirm that the document is not under a retention policy.

Answer

Review the SharePoint external sharing settings for the site collection.

Question 12

Your organization needs to ensure that all emails containing credit card numbers are automatically encrypted before being sent to external recipients. Which Microsoft Purview solution should you configure?

Accepted Answer

Configure a DLP policy that uses the 'Encrypt email messages' action.. The requirement is to automatically encrypt emails based on content (credit card numbers). Microsoft Purview Message Encryption can be triggered by a DLP policy that detects sensitive information types. Option B is incorrect because sensitivity labels are manually applied. Option C is incorrect because Data Lifecycle Management handles retention and deletion. Option D is incorrect because Communication Compliance monitors for policy violations, not encryption.

Answer

Create a sensitivity label that applies encryption and auto-labeling.

Answer

Set up a retention policy with encryption.

Answer

Implement a Communication Compliance policy.

Question 13

Refer to the exhibit. You are reviewing a Microsoft Purview Data Lifecycle Management policy. A document labeled 'Personal Data' also contains EU_Deceased_Data. What is the retention outcome for this document?

Accepted Answer

The document is retained for 365 days, then deleted.. The policy contains two rules: the first rule retains content labeled 'Personal Data' for 365 days, and the second rule deletes content containing EU_Deceased_Data after 90 days. When a document meets both conditions, Microsoft Purview applies the longer retention period because retention takes precedence over deletion. Therefore, the document is retained for 365 days and then deleted. Option A is correct.

Answer

The document is deleted after 90 days.

Answer

The document is retained indefinitely because of conflicting rules.

Answer

The document is deleted immediately because it contains sensitive data.

Question 14

A company uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. They recently deployed Microsoft Copilot for Microsoft 365. Users can now ask Copilot to summarize documents that contain sensitive information. How should the company extend DLP protection to Copilot interactions?

Accepted Answer

Enable DLP for Copilot in the DLP policy settings.. Microsoft Purview DLP policies can be extended to cover Copilot for Microsoft 365 interactions by enabling the 'Copilot' workload in the DLP policy settings. Option A is incorrect because sensitivity labels can restrict access, but they do not provide DLP monitoring for Copilot. Option B is incorrect because Information Barriers restrict communication between specific groups but do not scan or block sensitive data in Copilot. Option D is incorrect because Communication Compliance is used to monitor communications for policy violations, not for DLP protection of Copilot interactions.

Answer

Apply a sensitivity label that restricts Copilot access.

Answer

Implement Information Barriers for Copilot.

Answer

Configure a Communication Compliance policy to monitor Copilot.

Question 15

Your organization needs to automatically detect and classify documents containing passport numbers in SharePoint Online. Which Microsoft Purview feature should you use?

Accepted Answer

Auto-labeling with sensitivity labels.. Auto-labeling in Microsoft Purview can automatically apply sensitivity labels to documents that contain sensitive information types like passport numbers. Option A is incorrect because eDiscovery (Premium) is used for legal discovery and search, not automatic classification. Option C is incorrect because Data Lifecycle Management (DLM) policies manage retention and deletion, not classification. Option D is incorrect because Data Loss Prevention (DLP) policies detect and protect sensitive data but do not apply classification labels; auto-labeling with sensitivity labels is the correct feature.

Answer

eDiscovery (Premium).

Answer

Data Lifecycle Management (DLM) policy.

Answer

Data Loss Prevention (DLP) policy.