MS-102 Manage compliance by using Microsoft Purview Practice Test 5 — 15 Questions

Question 1

A compliance officer needs to prevent users from sharing emails that contain credit card numbers with external recipients. When a user attempts to send such an email, it should be blocked immediately, and a policy tip should notify the user. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Data Loss Prevention (DLP) policy. A Data Loss Prevention (DLP) policy is the correct solution because it is specifically designed to detect sensitive information, such as credit card numbers, in transit (e.g., email) and enforce actions like blocking the message and displaying a policy tip to the user. DLP policies use sensitive information types (e.g., Credit Card Number) and rules to inspect content in Exchange Online, SharePoint, OneDrive, and Teams, allowing real-time blocking with user notification. This directly meets the compliance officer's requirement to prevent external sharing and provide immediate feedback.

Answer

sensitivity label

Answer

retention label

Answer

An information barrier policy

Question 2

A compliance officer needs to retain all documents in a SharePoint Online site for 7 years and then automatically delete them. During the retention period, users must be able to edit the documents but not delete them. Which Microsoft Purview solution should the officer configure?

Accepted Answer

retention policy configured with a retention period of 7 years and an action to delete items automatically. A retention policy in Microsoft Purview can be applied at the site level to enforce a 7-year retention period with automatic deletion, while allowing users to edit documents during that time. The policy prevents deletion by users because the retention lock overrides user permissions, ensuring compliance with the requirement to block deletion but permit edits.

Answer

retention label configured with a retention period and an action to delete after 7 years

Answer

data lifecycle management policy

Answer

An eDiscovery hold

Question 3

A compliance officer needs to automatically detect documents in SharePoint Online that contain a custom pattern (e.g., employee ID in the format EMP-12345). The pattern will be used to apply a sensitivity label. Which Microsoft Purview feature should the officer use to define the pattern?

Accepted Answer

Sensitive information types. Sensitive information types (SITs) in Microsoft Purview are specifically designed to define custom patterns, such as regular expressions for employee IDs like EMP-12345. Once defined, these SITs can be used in sensitivity labels to automatically classify and protect documents in SharePoint Online. This is the correct feature because it directly supports pattern-based detection for labeling.

Answer

Data Loss Prevention (DLP) policies

Answer

Content search

Answer

Data classification reports

Question 4

A compliance officer needs to automatically detect and apply a sensitivity label to documents in SharePoint Online that contain personally identifiable information (PII) such as social security numbers. The label should be applied automatically, and users must be able to override the label with a justification. Which two Microsoft Purview components must be configured to achieve this?

Accepted Answer

sensitive info type (SIT) and an auto-labeling policy. Option A is correct because auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels to documents in SharePoint Online based on sensitive info types (SITs), such as social security numbers. The auto-labeling policy supports user override with justification when configured with the 'Mandatory labeling with justification' setting, meeting the compliance officer's requirements.

Answer

data loss prevention (DLP) policy and a retention label

Answer

default sensitivity label and a compliance tag

Question 5

A company must ensure that all outgoing emails containing credit card numbers are blocked from being sent to external recipients. When a user attempts to send such an email, it should be blocked immediately, and the user should see a policy tip explaining the rule. Which Microsoft Purview solution should the administrator configure?

Accepted Answer

Data Loss Prevention (DLP) policy. A Data Loss Prevention (DLP) policy is the correct solution because it is specifically designed to detect sensitive information, such as credit card numbers, in transit (email) and enforce real-time actions like blocking the message and displaying a policy tip to the user. DLP policies in Microsoft Purview can be configured with conditions that match credit card number patterns using built-in sensitive info types, and the action 'Block messages' with a policy tip notification is available for Exchange Online mail flow. This ensures immediate blocking and user notification without requiring any manual labeling or classification.

Answer

Sensitivity labels

Answer

Retention labels

Answer

Communication compliance

Question 6

An administrator is creating a Microsoft Purview auto-labeling policy for documents containing personally identifiable information. Before turning the policy on automatically, what should the administrator do to reduce false positives?

Accepted Answer

Run the auto-labeling policy in simulation mode and review matches. Running the auto-labeling policy in simulation mode allows the administrator to review which documents would be matched by the policy without actually applying labels. This enables analysis of the detection results to identify and reduce false positives before enabling automatic application, ensuring the policy accurately targets only documents containing the specified PII.

Answer

Publish the label directly to all users and enable automatic application immediately

Answer

Create an eDiscovery hold for the SharePoint locations

Answer

Configure a retention policy before creating the sensitivity label

Question 7

A compliance officer needs to prevent users from sharing documents that have been labeled 'Highly Confidential' with external users. When a user attempts to share such a document externally, the action should be blocked and the user should see a policy tip. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Data Loss Prevention (DLP) policy. A Data Loss Prevention (DLP) policy is the correct solution because it can inspect content and context (including sensitivity labels) to enforce rules that block external sharing of documents labeled 'Highly Confidential' and display a policy tip to the user. DLP policies in Microsoft Purview are specifically designed to prevent accidental or intentional data leakage by monitoring and controlling sharing actions in real time.

Answer

Sensitivity label encryption

Answer

Retention policy

Answer

Records management

Question 8

A Microsoft Purview auto-labeling policy for sensitivity labels is matching too many SharePoint documents after simulation. Which two changes would most directly reduce false positives before enabling automatic labeling? (Choose two.)

Accepted Answer

Increase the confidence level or instance-count requirement for the sensitive information type. Increasing the confidence level or instance-count requirement for the sensitive information type (SIT) directly reduces false positives by raising the threshold for what qualifies as a match. A higher confidence level means the classification engine requires stronger evidence (e.g., more keywords or a closer proximity to a pattern), while a higher instance count requires the sensitive data to appear multiple times in the document. Both adjustments make the auto-labeling rule more selective, ensuring only documents with a high likelihood of containing the specified sensitive content are labeled.

Answer

Turn on automatic labeling immediately and wait for users to report problems

Answer

Replace the sensitivity label with a retention label

Question 9

A compliance officer needs to ensure that all documents in a SharePoint Online library are automatically labeled with a 'Confidential' sensitivity label if they contain at least one of a predefined list of sensitive information types such as credit card numbers or social security numbers. Users should be able to override the label with a business justification. Which Microsoft Purview feature should the officer configure?

Accepted Answer

Auto-labeling policy for SharePoint Online. Auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels to documents in SharePoint Online based on the detection of sensitive information types (e.g., credit card numbers, SSNs). This policy supports user override with a business justification, meeting the compliance officer's requirement exactly. Manual classification (Option D) would not automate the labeling, and DLP policies (Option B) focus on preventing data loss, not applying sensitivity labels.

Answer

Data Loss Prevention (DLP) policy

Answer

Retention label policy

Answer

Sensitivity label with manual classification

Question 10

A company uses Microsoft Purview Data Lifecycle Management. They have a retention policy that retains all documents in a specific SharePoint Online site for 5 years and then automatically deletes them. Some documents in that site have a retention label that retains them for 7 years and then deletes them. What is the effective retention period for those labeled documents?

Accepted Answer

7 years. When a retention label is applied to a document, it takes precedence over a retention policy at the item level. The label's retention setting (7 years) overrides the site-level policy (5 years), so the effective retention period for the labeled documents is 7 years, after which they are automatically deleted.

Answer

5 years

Answer

The documents are retained indefinitely due to conflict

Answer

The documents are retained for 5 years and then archived

Question 11

A compliance officer needs to mark documents in a SharePoint Online library as regulatory records. These records must be immutable (cannot be modified or deleted) for 3 years. After 3 years, a disposition review must be initiated to decide if the records can be deleted. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Retention label configured to mark items as records with a retention period of 3 years and disposition review. Option A is correct because a retention label configured to mark items as regulatory records enforces immutability (no modification or deletion) for the specified retention period of 3 years. After the retention period expires, the disposition review triggers a workflow where a reviewer must approve or reject deletion, meeting the compliance officer's requirement exactly.

Answer

Data Lifecycle Management retention policy with disposition review

Answer

Sensitivity label with encryption

Answer

eDiscovery case with hold

Question 12

A compliance officer needs to automatically apply a retention label to all documents in a SharePoint Online site that have not been modified for more than 3 years. The label should retain the documents for an additional 5 years, then trigger a disposition review. Which action should the officer configure in the auto-apply retention label policy?

Accepted Answer

Configure a condition that detects 'Last Modified Date' is older than 3 years. Option A is correct because the auto-apply retention label policy in Microsoft Purview can use a KQL-based condition to detect documents where the 'Last Modified Date' is older than 3 years. This triggers the label to retain the documents for 5 additional years and then initiate a disposition review, meeting the compliance officer's requirement exactly.

Answer

Configure a condition that detects 'Created Date' is older than 3 years

Answer

Select the retention label and manually publish to the site, then use a Power Automate flow to apply the label

Answer

Create a data lifecycle management policy using a query for documents created before a certain date

Question 13

A compliance officer needs to ensure that all documents in a Microsoft Teams channel are automatically retained for 3 years after creation and then permanently deleted. The retention policy should apply only to the specific channel, not the entire team. Which approach should the officer use?

Accepted Answer

Create a retention policy in Microsoft Purview and select the location 'Teams channel messages', then specify the channel name. Option A is correct because Microsoft Purview retention policies can be scoped to specific Teams channel messages by selecting the 'Teams channel messages' location and specifying the channel name. This ensures that only messages in that channel are retained for 3 years and then permanently deleted, without affecting the rest of the team or other content types.

Answer

Create a retention policy in Microsoft Purview and select the location 'Teams chats' for the entire team

Answer

Publish a retention label to the channel and configure auto-application rules based on creation date

Answer

Use Exchange Online PowerShell to create a retention policy for the channel mailbox

Question 14

A compliance officer needs to implement a policy that automatically marks emails containing a specific custom sensitive information type as a regulatory record upon sending. The regulatory record must be retained for 10 years and cannot be deleted by users. Which two components must be configured to achieve this?

Accepted Answer

Create a custom sensitive information type and configure an auto-apply retention label policy that applies a regulatory record label. To automatically mark emails containing a specific custom sensitive information type as a regulatory record upon sending, you need both a custom sensitive information type (to define the data pattern) and an auto-apply retention label policy (to automatically apply a regulatory record label based on that pattern). The regulatory record label enforces the 10-year retention and prohibits user deletion, meeting the compliance officer's requirements without manual user action.

Answer

Create a retention label with record marking and publish it to all users, then train users to apply it manually

Answer

Create a Data Loss Prevention (DLP) policy that detects the custom pattern and blocks the email until it is labeled

Question 15

A compliance officer needs to automatically identify and label content that is conceptually similar to existing sensitive documents, such as internal strategy memos or proprietary technical specifications, without relying on explicit keywords or recognized sensitive information types. Which Microsoft Purview solution should the officer use to achieve this?

Accepted Answer

trainable classifier. A trainable classifier uses machine learning to identify content based on patterns and context learned from sample documents, making it ideal for recognizing conceptually similar content without relying on explicit keywords or predefined sensitive information types. This allows the compliance officer to automatically label internal strategy memos or proprietary technical specifications that share conceptual similarity with existing sensitive documents.

Answer

sensitive information type

Answer

An auto-labeling policy with a retention label

Answer

Data Loss Prevention (DLP) policy that blocks sharing