MS-102 Manage compliance by using Microsoft Purview Practice Test 5 — 15 Questions

Question 1

A user has a document in SharePoint Online that is subject to a retention policy with a retention period of 5 years. The user attempts to delete the document but receives an error. What is the most likely reason?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The document is under a retention policy that preserves it.. Retention policies prevent users from permanently deleting documents during the retention period. Users can delete, but the document is retained in a preservation hold library. Option A is incorrect because DLP policies block sharing, not deletion. Option B is incorrect because sensitivity labels do not prevent deletion. Option C is incorrect because eDiscovery holds are legal holds, not retention policies, and the question explicitly states the document is subject to a retention policy.

Answer

A DLP policy blocks deletion of the document.

Answer

The document has a sensitivity label that prohibits deletion.

Answer

The document is under an eDiscovery hold.

Question 2

Your organization uses Microsoft Purview Compliance Manager. You need to assign a control to a specific user for implementation. What should you do?

Accepted Answer

Edit the control and assign a new owner.. In Microsoft Purview Compliance Manager, to assign a control to a specific user for implementation, you edit the control details and assign a new owner. This directly associates the user with the control for tracking and responsibility. Option A is incorrect because assigning the Compliance Manager role provides broad permissions to manage compliance settings but does not link to a specific control. Option C is incorrect because DLP policies are data loss prevention rules, not used for control assignment. Option D is incorrect because modifying an assessment changes the scope or scoring, not the owner of individual controls.

Answer

Assign the user the Compliance Manager role.

Answer

Create a DLP policy to enforce the control.

Answer

Modify the assessment to include the user.

Question 3

Your company is implementing Microsoft Purview Audit (Standard). You need to search for activities performed by a specific user in Exchange Online. Which log should you query?

Accepted Answer

Unified audit log.. The unified audit log in Microsoft Purview Audit (Standard) captures all user and admin activities across Microsoft 365 services including Exchange Online. For searching activities by a specific user in Exchange Online, querying the unified audit log (option A) is the appropriate action. Option B (DLP incident reports) is for data loss prevention incidents, not general user activities. Option C (Azure AD audit logs) focuses on identity and directory activities. Option D (Mailbox audit logs) is a subset of the unified audit log, but the unified audit log provides a comprehensive view.

Answer

DLP incident reports.

Answer

Azure AD audit logs.

Answer

Mailbox audit logs only.

Question 4

Refer to the exhibit. You run a Content Search in Microsoft Purview eDiscovery (Standard) for emails containing a specific keyword. The result shows one item in the DeletedItems folder. What is the most likely reason this email appears?

Accepted Answer

The email is in the Recoverable Items folder.. Content Search in Microsoft Purview eDiscovery (Standard) includes the Recoverable Items folder by default, which contains soft-deleted items. The item found in the DeletedItems folder is still recoverable because it is retained in the Recoverable Items folder (soft-deleted). Option B correctly identifies this. Option A is incorrect because permanently deleted items are not retained by retention policies in the mailbox; retention policies preserve items but do not retain permanently deleted items. Option C is incorrect because while the search includes DeletedItems by default, the question asks why the email appears, not why the search includes it. Option D is incorrect because there is no indication of an in-place hold.

Answer

The email was permanently deleted but retained by a retention policy.

Answer

The search includes deleted items by default.

Answer

The email is under an in-place hold.

Question 5

Your organization uses Microsoft Purview Records Management. You need to ensure that when a document is declared a record, it cannot be edited or deleted by users. Which type of record should you use?

Accepted Answer

Regulatory record. Regulatory records are locked and cannot be edited or deleted by any user, including administrators. This meets the requirement that users cannot edit or delete the document. Standard records (sometimes called regular records) can be edited or deleted by users with appropriate permissions, such as record managers. A retention label with a record setting is the method to mark an item as a record, but the label itself does not determine the type of record (standard vs regulatory); the label's configuration specifies whether it is a standard record or regulatory record. Therefore, to ensure no user can edit or delete the document, you must choose a regulatory record.

Answer

Regular record

Answer

Standard record

Answer

Retention label with record setting

Question 6

Your company uses Microsoft Purview Data Lifecycle Management. You have a policy that retains items for 3 years and then deletes them. A user places an eDiscovery hold on a folder that contains items subject to this policy. What happens to those items after 3 years?

Accepted Answer

They are preserved until the hold is removed.. eDiscovery hold takes precedence over the deletion policy. Items under a hold are preserved indefinitely until the hold is removed, regardless of any retention and deletion policies. Option C correctly states they are preserved until the hold is removed. Option A is incorrect because hold overrides the policy, not extending it. Option B is incorrect because items are not deleted while under hold. Option D is incorrect because items are not moved to a separate location.

Answer

They are retained for an additional 3 years.

Answer

They are deleted after 3 years.

Answer

They are moved to a separate location.

Question 7

Your organization uses Microsoft 365 E5 licenses. You need to configure retention labels to automatically retain emails related to ongoing litigation for 5 years and then delete them. The labels must be applied based on specific keywords in the email subject. What should you use?

Accepted Answer

Use an auto-apply retention label with a trainable classifier.. Use an auto-apply retention label with a trainable classifier. Auto-apply retention labels can use trainable classifiers to automatically apply labels based on keywords in the email subject, which satisfies the requirement for keyword-based retention and deletion. Option A is incorrect because a default retention label applies to all mailbox content, not based on keywords. Option B is incorrect because sensitivity labels focus on protection and classification, not retention. Option C is incorrect because a retention policy applies to all content in the location (e.g., all Exchange emails) and cannot filter by keywords. Therefore, D is the correct choice.

Answer

Configure a default retention label on the mailbox.

Answer

Deploy a sensitivity label with auto-labeling for Exchange.

Answer

Create a retention policy applied to Exchange email.

Question 8

Your company has a Microsoft 365 E5 subscription. You need to prevent users from sharing files containing credit card numbers with external users. What should you configure?

Accepted Answer

A DLP policy that blocks sharing of content with sensitive info type.. Data Loss Prevention (DLP) policies can detect sensitive information like credit card numbers and block sharing with external users. Option D is correct because a DLP policy can be configured to block sharing of content containing sensitive info types. Option A is wrong because retention policies manage data lifecycle, not prevent sharing. Option B is wrong because information barrier policies restrict communication between internal groups, not external sharing. Option C is wrong because sensitivity labels with encryption can protect content but do not directly block sharing based on sensitive data detection.

Answer

A retention policy for SharePoint sites.

Answer

An information barrier policy.

Answer

A sensitivity label with encryption.

Question 9

Your organization uses Microsoft Purview Data Lifecycle Management. You need to ensure that after an employee leaves, their OneDrive content is retained for 7 years and then automatically deleted. The retention label must be applied automatically when the employee is marked as inactive in Microsoft Entra ID. What should you configure?

Accepted Answer

Create an auto-apply retention label with adaptive scope for inactive users.. Auto-apply retention labels can use adaptive scopes based on Microsoft Entra ID attributes, such as isInactiveUser. This allows the label to be automatically applied when the employee is marked inactive, ensuring the OneDrive content is retained for 7 years and then deleted. Option A is incorrect because manual labels require user action and cannot be applied automatically. Option C is incorrect because a default retention label applies to new content only, not to existing content, and does not trigger based on inactivity. Option D is incorrect because a retention policy applies to all content in the target scope, not selectively based on user status, and it does not provide the flexibility of a retention label with adaptive scope.

Answer

Instruct users to manually apply a retention label to their OneDrive.

Answer

Configure a default retention label on the OneDrive library.

Answer

Create a retention policy for OneDrive with a 7-year retention period.

Question 10

You are a compliance administrator. You need to search for emails that contain trade secrets sent by a specific user in the last month. The search must include all mailboxes. What should you use?

Accepted Answer

Content search in Microsoft Purview.. Content search in Microsoft Purview allows searching across all mailboxes for specific keywords and date ranges, making it the appropriate tool to find emails containing trade secrets from a specific user in the last month. Option D is correct. Option A is wrong because eDiscovery (Premium) is designed for complex legal workflows and not for basic content search. Option B is wrong because Audit log search tracks user and admin activities, not email content. Option C is wrong because Data Loss Prevention (DLP) reports show policy matches and alerts, but do not allow searching across mailbox content for specific keywords.

Answer

eDiscovery (Premium) case.

Answer

Data Loss Prevention reports.

Answer

Audit log search.

Question 11

Your organization uses Microsoft Purview Records Management. You need to ensure that records are marked as regulatory records and cannot be deleted or modified by any user, including administrators. The records must be retained for 10 years. What should you do?

Accepted Answer

Use a retention label marked as a regulatory record.. Regulatory records provide the highest level of restriction, making content tamper-proof and unmodifiable by any user, including administrators. A retention label marked as a regulatory record ensures that records are retained for the specified duration and cannot be deleted or modified. Option B is incorrect because a preservation lock applies to a retention policy, not individual records, and still allows modifications until the lock is applied. Option C is incorrect because a record label (non-regulatory) can be modified or deleted by administrators. Option D is incorrect because a default retention label can be changed by users or administrators and does not enforce regulatory compliance.

Answer

Create a retention policy with a preservation lock.

Answer

Use a retention label marked as a record.

Answer

Apply a default retention label to the SharePoint library.

Question 12

You need to implement a solution that allows users to classify documents containing personal data as 'Highly Confidential' and automatically encrypt them when shared via email. What should you configure?

Accepted Answer

A sensitivity label with auto-labeling and encryption.. A sensitivity label with auto-labeling and encryption is correct because sensitivity labels in Microsoft Purview Information Protection can be configured to automatically classify documents based on sensitive data types (e.g., personal data) and apply encryption to protect the content when shared via email. The auto-labeling feature uses conditions like pattern matching for personally identifiable information (PII) to assign the 'Highly Confidential' label, and the encryption action ensures the document is protected with Rights Management Services (RMS) policies, preventing unauthorized access even if the email is forwarded.

Answer

A retention label with a disposition action.

Answer

An information barrier policy.

Answer

A DLP policy with an action to block sharing.

Question 13

Your company is migrating from an on-premises file server to SharePoint Online. You need to ensure that files containing personally identifiable information (PII) are automatically detected and classified with a sensitivity label. What should you use?

Accepted Answer

Auto-labeling for sensitivity labels in Microsoft 365.. Auto-labeling for sensitivity labels in Microsoft 365 can scan files at rest in SharePoint Online and automatically apply sensitivity labels based on sensitive info types, such as PII. This directly meets the requirement. Option A is incorrect because retention labels manage lifecycle, not sensitivity classification. Option B is incorrect because the Microsoft Information Protection scanner is designed for on-premises file servers, not SharePoint Online. Option C is incorrect because DLP policies block or monitor sharing, but they do not apply labels.

Answer

A retention label auto-applied by a trainable classifier.

Answer

Microsoft Information Protection scanner.

Answer

A DLP policy to block sharing of PII.

Question 14

Your organization has a Microsoft 365 E5 subscription and uses Microsoft Teams. You need to prevent external users from being added to sensitive teams that contain financial data. What should you configure?

Accepted Answer

A sensitivity label for containers that blocks guest access.. Sensitivity labels for containers can restrict guest access, preventing external users from being added to sensitive teams. Option A is correct because it directly controls guest membership at the container level. Option B is incorrect because Azure AD Conditional Access controls sign-in, not team membership. Option C is incorrect because information barriers restrict communication, not guest access. Option D is incorrect because DLP policies monitor content, not guest access.

Answer

Azure AD Conditional Access policy for guest users.

Answer

An information barrier policy between finance and external.

Answer

A DLP policy for Teams chat and channel messages.

Question 15

You need to monitor which users have accessed a specific document stored in SharePoint Online over the last 90 days. What should you use?

Accepted Answer

Audit log search in Microsoft Purview.. Audit log search in Microsoft Purview records user activities including file access, and can be filtered to show who accessed a specific document. Option A is incorrect because Data Loss Prevention reports show policy matches, not access. Option B is incorrect because eDiscovery (Premium) cases are for legal holds, reviews, and advanced collection, not for monitoring access. Option C is incorrect because Content search searches for content matching keywords, not for access events.

Answer

Data Loss Prevention reports.

Answer

eDiscovery (Premium) case.

Answer

Content search in Microsoft Purview.