MS-102 Manage compliance by using Microsoft Purview Practice Test 6 — 15 Questions

Question 1

You are the Microsoft 365 administrator for Contoso Ltd. The compliance team needs to implement data lifecycle management and records management using Microsoft Purview. Which three of the following actions should you take to meet these requirements? (Choose three.)

Accepted Answer

Publish retention labels so that users can manually apply them to items in SharePoint and OneDrive.. Retention labels that automatically apply a retention policy based on sensitive information types (like PII) allow you to implement data lifecycle management by automatically classifying and retaining or deleting content without user intervention. This meets the compliance team's requirement for automated lifecycle management.

Answer

Enable audit logging to automatically enforce retention periods for all Microsoft 365 workloads.

Answer

Deploy Microsoft Purview Compliance Manager to automate the deletion of stale data in Exchange Online.

Answer

Use data loss prevention (DLP) policies to automatically delete emails containing credit card numbers after 30 days.

Question 2

A global administrator at Fabrikam Inc. plans to implement Microsoft Purview to manage compliance for sensitive information. The solution must include the ability to discover, classify, and protect sensitive data across Microsoft 365 services. Which three of the following should the administrator configure? (Choose three.)

Accepted Answer

Create a sensitive information type to detect custom data patterns, such as employee IDs.. Creating a sensitive information type is correct because it allows the administrator to define custom patterns (e.g., employee IDs) that Microsoft Purview can use to discover and classify sensitive data across Microsoft 365 services. This is a foundational step for building compliance policies tailored to the organization's specific data.

Answer

Deploy Microsoft Purview eDiscovery to automatically classify all content in Microsoft Teams chats.

Answer

Set up a data loss prevention (DLP) policy to block external sharing of files labeled as 'Highly Confidential'.

Answer

Enable Microsoft Purview Insider Risk Management to scan and label all historical email data.

Question 3

You are the Microsoft 365 Administrator for a multinational organization that must comply with various regulatory requirements, including GDPR, SOX, and internal data retention policies. You are deploying Microsoft Purview compliance solutions. Which four of the following actions are valid steps when managing compliance using Microsoft Purview? (Choose all that apply. There are four correct answers.)

Accepted Answer

Enable auditing in the Microsoft 365 compliance portal to track user activities such as file downloads and mailbox access.. Creating a DLP policy that prevents sharing credit card numbers via email with external recipients is a valid step because Microsoft Purview Data Loss Prevention (DLP) policies can detect sensitive information types (e.g., credit card numbers) and enforce actions such as blocking external sharing. This directly supports compliance with regulations like GDPR and SOX by preventing unauthorized data exfiltration.

Answer

Apply a sensitivity label to a SharePoint site that blocks all external sharing of documents stored in that site.

Answer

Assign a retention policy to a user's mailbox that deletes all emails immediately after they are sent.

Question 4

Drag and drop the steps to configure Data Loss Prevention (DLP) policies in Microsoft Purview in the correct order.

Question 5

Drag and drop the steps to configure Microsoft 365 audit log search in the correct order.

Question 6

Match each Microsoft 365 role to its administrative scope.

Question 7

Match each Microsoft 365 migration tool to its use case.

Question 8

Your organization uses Microsoft Purview to enforce data loss prevention (DLP) policies. Users report that a DLP policy blocks legitimate sharing of a document containing sensitive financial data. You need to allow the sharing while still protecting the data. What should you do?

Accepted Answer

Configure a policy tip to allow override with a business justification.. Option B is correct because creating a policy override with a business justification allows users to bypass the policy with a reason, which is audited. Option A is wrong because disabling the policy would remove protection. Option C is wrong because adding the user to a super user group would completely bypass DLP. Option D is wrong because modifying the condition would change the policy for all users.

Answer

Disable the DLP policy and create a new one with broader conditions.

Answer

Add the user to the DLP policy's super user group.

Answer

Modify the DLP policy to exclude the specific document type.

Question 9

A company needs to automatically retain all emails sent to or from external partners for 7 years. They also need to ensure that after 7 years, the emails are permanently deleted. What should you configure in Microsoft Purview?

Accepted Answer

Create a retention policy for Exchange email with a retention period of 7 years, followed by deletion.. Option A is correct because a retention policy with both retain and delete actions meets the requirement. Option B is wrong because a retention label requires manual or auto-classification. Option C is wrong because a DLP policy is for preventing data loss, not retention. Option D is wrong because an eDiscovery hold preserves content indefinitely.

Answer

Create a retention label with a retention period of 7 years and publish it to all users.

Answer

Create an eDiscovery hold for all external partner communications.

Answer

Create a data loss prevention (DLP) policy to block deletion of emails after 7 years.

Question 10

Your organization uses Microsoft Purview Information Protection with sensitivity labels. Users complain that when they apply the 'Confidential' label to a document, the footer and header are not applied automatically. The label is configured to have a footer reading 'Confidential' and a header reading 'Sensitive'. What is the most likely cause?

Accepted Answer

The Microsoft 365 Apps for enterprise client is not configured to apply markings.. Option C is correct because automatic marking requires the client to be configured to apply headers and footers. Option A is wrong because the label configuration itself does not need client configuration. Option B is wrong because encryption does not affect markings. Option D is wrong because the sensitivity bar is for selecting labels, not for applying markings.

Answer

The label is configured with encryption, which prevents markings.

Answer

The label is not published to the users.

Answer

The sensitivity bar is disabled in the applications.

Question 11

Your organization uses Microsoft Purview Compliance Manager to manage compliance activities. Which TWO actions can be performed directly from Compliance Manager?

Accepted Answer

Assign an improvement action to a user.. Compliance Manager is a solution within Microsoft Purview that provides a centralized dashboard for managing compliance activities. It allows you to assign improvement actions to specific users to track responsibility and progress, and to upload evidence files directly to an improvement action to demonstrate compliance with a control. These are core, direct functions of the Compliance Manager interface.

Answer

View and manage DLP alerts.

Answer

Create a retention policy for Exchange Online.

Answer

Create a sensitivity label.

Question 12

Your organization uses Microsoft Purview Data Lifecycle Management to manage data retention. You need to retain all documents in a SharePoint site for 5 years and then allow users to delete them manually. Which THREE settings must be configured?

Accepted Answer

Specify the SharePoint site as the location.. Options A, C, and D are correct because the policy must cover the site, retain for 5 years, and then allow manual deletion. Option B is wrong because auto-delete would delete automatically, not allow manual deletion. Option E is wrong because a label is not required for a site-level policy.

Answer

Apply a default retention label to the document library.

Answer

Set the retention period to 5 years and then delete automatically.

Question 13

Your company is implementing Microsoft Purview Data Loss Prevention (DLP) to protect credit card numbers in emails. Which THREE actions can a DLP policy take when a match is found?

Accepted Answer

Allow the user to override the block with a business justification.. Options A, B, and C are correct because DLP can block sending, send notification, and allow override. Option D is wrong because encrypting email with rights management is an action, but not listed as a standard DLP action (it is an exception). Option E is wrong because DLP does not delete emails automatically.

Answer

Delete the email from the recipient's inbox.

Answer

Encrypt the email automatically.

Question 14

Refer to the exhibit. You are reviewing a Microsoft Purview auto-labeling policy configuration. The SensitivityTypes GUID corresponds to a sensitive info type that detects credit card numbers. The LabelId is for a 'Confidential' label. Users report that documents containing credit card numbers are not being automatically labeled. What is the most likely reason?

Accepted Answer

The auto-labeling policy is not scoped to the correct locations (e.g., SharePoint, Exchange).. Option D is correct because the exhibit shows the condition is set to 'AllUsers', which means all users are targeted, but the label assignment method is 'Automatic' with a condition. However, the policy might not have been configured to apply to locations like SharePoint or Exchange. Option A is wrong because the sensitive info type is correct. Option B is wrong because automatic labeling does not require a user license for the label. Option C is wrong because the label is published if it's in the policy.

Answer

The 'Confidential' label is not published to users.

Answer

The sensitive info type GUID is incorrect.

Answer

Users do not have the appropriate license for auto-labeling.

Question 15

Refer to the exhibit. You run the Get-RetentionCompliancePolicy cmdlet and see the output. Your organization wants to retain all ProjectX documents for 10 years and then allow users to delete them. However, users complain that documents are being deleted automatically. What is the issue?

Accepted Answer

The retention action is set to Delete instead of NoAction.. Option C is correct because the RetentionAction is set to 'Delete', which means after 3650 days, the content is deleted automatically. The requirement is to allow manual deletion after retention. Option A is wrong because the policy is disabled (Enabled: False) so it is not enforcing, but the RetentionAction still shows Delete. Option B is wrong because Mode is Enable, which means the policy is active. Option D is wrong because the trigger is DateCreated, which is appropriate.

Answer

The policy is disabled, so it should not be enforcing.

Answer

The mode is set to Enable, which means the policy is in test mode.

Answer

The retention trigger is set to DateCreated, which is incorrect.