MS-102 Manage compliance by using Microsoft Purview Practice Test 6 — 15 Questions

Question 1

Which TWO actions can you perform using Microsoft Purview Data Loss Prevention (DLP) policies?

Accepted Answer

Show a policy tip to users when they attempt to share sensitive data.. DLP policies can block sharing of sensitive information (Option C) and notify users with policy tips (Option B). Option A is incorrect because retention periods are set by retention policies, not DLP. Option D is incorrect because watermarks are applied by sensitivity labels or Azure Information Protection, not DLP. Option E is incorrect because automatic encryption is handled by sensitivity labels or message encryption, not DLP.

Answer

Set retention periods for documents containing credit card numbers.

Answer

Add a watermark to sensitive documents.

Answer

Automatically encrypt sensitive files when shared.

Question 2

Which THREE components are required to implement auto-labeling for sensitivity labels in Microsoft 365?

Accepted Answer

A sensitivity label configured for auto-labeling.. Auto-labeling for sensitivity labels requires three components: a sensitivity label configured for auto-labeling (A), a sensitive info type or trainable classifier to detect content (C), and an auto-labeling policy that specifies the label and locations (D). Option A is correct because the label must be created with auto-labeling enabled. Option C is correct because the classification engine needs a sensitive info type or trainable classifier to identify content. Option D is correct because the policy defines where and when to apply the label. Option B is incorrect because DLP policies are separate from auto-labeling; they enforce actions but are not required. Option E is incorrect because information barriers control communication, not auto-labeling.

Answer

A DLP policy for the same sensitive info type.

Answer

An information barrier policy.

Question 3

Which TWO features are part of Microsoft Purview Communication Compliance?

Accepted Answer

Policy tips to notify users of policy violations.. Communication Compliance includes features such as detecting inappropriate or offensive language (option D) and providing policy tips to notify users of policy violations (option C). Options A, B, and E are not features of Communication Compliance: A describes information barriers, B describes retention labels, and E describes automatic encryption.

Answer

Restricting communication between specific groups.

Answer

Applying retention labels to communications.

Answer

Automatic encryption of sensitive communications.

Question 4

Refer to the exhibit. You are a compliance administrator. You need to ensure that documents in the Project X site are retained for 365 days after the last modification and then deleted. The current configuration is shown. What is the outcome?

Accepted Answer

The label is applied automatically to all items in the site, retaining them for 365 days from last modification.. The retention label is configured with a retention period based on the last modification date (ModificationAgeInDays). The policy applies the label automatically to all items in the site via an adaptive scope. Therefore, the label is applied automatically to all items, and the retention period starts from the last modification date, retaining items for 365 days and then deleting them. Option C is correct because it accurately describes this automatic application and the retention period starting from last modification. Option A is incorrect because the policy applies to both new and existing items. Option B is incorrect because the label is applied automatically, not manually. Option D is incorrect because the retention period starts from last modification, not creation.

Answer

The label is applied only to new items, not existing.

Answer

The label is not applied automatically; users must apply it manually.

Answer

The label is applied, but the retention period starts from the creation date.

Question 5

Refer to the exhibit. You run the PowerShell command shown. The output shows no results. The user confirms they downloaded files from SharePoint last week. What is the most likely cause?

Accepted Answer

Audit logging is not enabled for the user.. The most likely cause is that audit logging is not enabled for the user (Option C). Without audit logging enabled, no events are recorded regardless of correct parameters or user actions. Option A is incorrect because 'UserIds' is a valid parameter and the spelling is correct. Option B is incorrect because 'RecordType' is a valid parameter and does not need to be set for this query. Option D is incorrect because 'FileDownloaded' is a valid operation for SharePoint file downloads.

Answer

The UserIds parameter is misspelled.

Answer

The RecordType parameter is incorrect.

Answer

The Operations parameter is incorrect.

Question 6

Refer to the exhibit. You are configuring auto-labeling for sensitivity labels. The JSON snippet is part of the policy configuration. When a document containing a credit card number is detected, what will happen?

Accepted Answer

The document will be automatically encrypted.. The JSON policy snippet defines a rule that when a credit card number is detected, the action taken is 'encrypt'. Therefore, the document will be automatically encrypted. Option A is correct. Option B is incorrect because retention is not specified; the action is encryption, not retention. Option C is incorrect because no record marking is configured. Option D is incorrect because the action is encryption, not blocking sharing.

Answer

The document will be retained for a default period.

Answer

The document will be marked as a record.

Answer

The document will be blocked from sharing.

Question 7

Your organization uses Microsoft Purview Data Loss Prevention (DLP) policies to protect sensitive data. A user reports that they can still send credit card numbers via email despite the DLP policy being enabled. You verify that the policy is applied to the correct users and the rule includes the 'Credit Card Number' sensitive info type. What should you check next?

Accepted Answer

Check the priority of the DLP policy to ensure it is not overridden by a lower-priority policy that allows the action.. DLP policies often fail due to incorrect priority order; the policy with the highest priority (lowest number) is applied first. Option B is wrong because the condition is already present. Option C is wrong because the policy is already enabled. Option D is wrong because end-user notifications are for policy tips, not enforcement.

Answer

Disable and re-enable the DLP policy to refresh its rules.

Answer

Add the 'Credit Card Number' sensitive info type to the policy rule again.

Answer

Configure end-user notifications for the DLP policy.

Question 8

Contoso Ltd. uses Microsoft Purview to manage compliance for sensitive data across Microsoft 365 and Azure. They need to ensure that all documents containing personally identifiable information (PII) are automatically labeled with a 'Highly Confidential' sensitivity label. The solution must also require users to justify access to these labeled documents. Which two actions should you configure?

Accepted Answer

Create a Microsoft Purview auto-labeling policy for sensitivity labels.. Microsoft Purview auto-labeling policies can automatically apply sensitivity labels to documents containing PII, such as a 'Highly Confidential' label. Option E is correct because configuring the sensitivity label with rights management protection and enabling the 'Justify access' option ensures that users must provide a justification before accessing labeled documents. Options A, C, and D are incorrect because retention labels do not enforce access justification, DLP policies block sharing but do not require justification, and audit logging tracks events but does not enforce justification.

Answer

Configure a retention label to mark documents as 'Highly Confidential'.

Answer

Create a DLP policy that blocks sharing of unlabeled documents.

Answer

Enable Microsoft Purview Audit (Standard) to log access to sensitive documents.

Question 9

Your organization needs to implement a Microsoft Purview data classification solution that scans data in Microsoft 365, Azure SQL Database, and Amazon S3. Which Microsoft Purview feature should you use?

Accepted Answer

Microsoft Purview Data Map. Microsoft Purview Data Map provides automated data scanning and classification across multi-cloud and on-premises data sources including Microsoft 365, Azure SQL Database, and Amazon S3. Option A is incorrect because Data Loss Prevention (DLP) policies focus on preventing data leaks, not on scanning and classifying data across all sources. Option B is incorrect because sensitivity labels are applied to data after classification, but the scanning itself is performed by Data Map. Option C is incorrect because eDiscovery is designed for legal and investigative searches, not for automated data classification scanning.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Information Protection sensitivity labels

Answer

Microsoft Purview eDiscovery

Question 10

Your organization has a Microsoft Purview data classification policy that automatically applies a 'General' label to all documents. However, users are complaining that the label is not being applied to documents stored in SharePoint Online. You confirm that the policy is configured correctly and the license is assigned. What is the most likely cause?

Accepted Answer

The auto-labeling policy is not configured to scan SharePoint Online.. The auto-labeling policy must be configured to scan specific locations, including SharePoint Online. If scanning is not enabled for SharePoint, the policy will not apply labels to documents stored there. Option A is incorrect because the label is already published; user assignment is not required for auto-labeling. Option B is incorrect because the policy is enabled as confirmed in the scenario. Option C is incorrect because sensitivity labels can be configured without encryption, and encryption does not prevent label application.

Answer

The sensitivity label is not published to the users.

Answer

The auto-labeling policy is disabled.

Answer

The sensitivity label requires encryption and the users don't have the encryption key.

Question 11

Your company uses Microsoft Purview to manage compliance. You need to ensure that only users who have passed a training course can access documents labeled 'Confidential'. The solution must enforce this dynamically without manual intervention. What should you configure?

Accepted Answer

Microsoft Entra ID Conditional Access policy with a terms of use requiring training acknowledgment.. Microsoft Entra ID Conditional Access can require terms of use acceptance (which can include training acknowledgment) before accessing labeled content. Option A is wrong because DLP doesn't enforce user training. Option B is wrong because labels don't enforce training. Option C is wrong because privileged access management is for administrative roles, not document access.

Answer

Microsoft Purview Privileged Access Management to require approval for access.

Answer

A Microsoft Purview DLP policy that blocks access for untrained users.

Answer

A Microsoft Purview sensitivity label with a custom permission that only allows trained users.

Question 12

Your organization is required to retain all financial records for seven years. Which Microsoft Purview solution should you use to enforce this requirement?

Accepted Answer

Microsoft Purview retention policies. Retention policies in Microsoft Purview are specifically designed to enforce data retention requirements for a defined period, such as seven years for financial records. Option A is incorrect because Data Loss Prevention (DLP) focuses on preventing unauthorized sharing or leakage of sensitive data, not on retaining data. Option B is incorrect because Records Management is a broader capability that includes declaring records and managing disposition, but the specific tool for enforcing retention based on time is retention policies. Option D is incorrect because Microsoft Purview Audit tracks user and admin activities for compliance investigations, but it does not enforce data retention.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Records Management

Answer

Microsoft Purview Audit

Question 13

Your organization has a Microsoft Purview auto-labeling policy that applies a 'Highly Confidential' label to emails containing 'Social Security Number'. The policy is configured to label emails when they are sent. However, some emails are still being sent without the label. What should you verify first?

Accepted Answer

That the auto-labeling policy is configured to apply the label at the time of sending.. The auto-labeling policy must be configured to apply the label at send time; if it is set to apply only when the email is saved or as a recommendation, it will not label automatically during send. Option A is incorrect because the policy being enabled does not guarantee it applies at send. Option C is incorrect because the SSN sensitive info type is likely correctly defined if it matches the content. Option D is incorrect because priority determines which policy applies when multiple policies match, not whether labeling occurs at send.

Answer

That the auto-labeling policy is enabled.

Answer

That the 'Social Security Number' sensitive info type is correctly defined.

Answer

That the auto-labeling policy has the highest priority.

Question 14

Your company uses Microsoft Purview to manage compliance. You need to set up a process that allows users to request permission to access a document labeled 'Confidential' and automatically grants access if the user's manager approves. Which feature should you use?

Accepted Answer

Microsoft Entra ID Access Reviews with a connected organization. Microsoft Entra ID Access Reviews, when integrated with a connected organization, can create approval workflows for access requests to documents labeled 'Confidential'. Option A is wrong because Privileged Access Management is for managing just-in-time access to elevated admin roles, not document access. Option B is wrong because Data Loss Prevention (DLP) policies prevent data leakage but do not handle access requests. Option D is wrong because sensitivity labels with custom permissions allow users to apply permissions, but they do not include approval workflows for manager approval.

Answer

Microsoft Purview Privileged Access Management

Answer

Microsoft Purview Data Loss Prevention with a custom policy

Answer

Microsoft Purview sensitivity label with a custom permission

Question 15

Your organization uses Microsoft Purview to classify and protect data. You need to create a custom sensitive info type that detects employee IDs formatted as 'EMP-XXXXX' where X is a digit. Which approach should you use?

Accepted Answer

Create a custom sensitive info type using a regular expression.. A custom sensitive info type using a regular expression is the best way to define the pattern 'EMP-XXXXX' (where X is a digit). Option B is incorrect because a keyword dictionary is used for exact word matching, not pattern matching. Option C is incorrect because Exact Data Match (EDM) requires a source of exact data values, not a pattern. Option D is incorrect because the built-in 'Employee ID' sensitive info type may not match this specific format.

Answer

Use a keyword dictionary for the pattern.

Answer

Use exact data match (EDM) based classification.

Answer

Use the built-in 'Employee ID' sensitive info type.