MS-102 Manage compliance by using Microsoft Purview Practice Test 7 — 15 Questions

Question 1

Refer to the exhibit. You search the unified audit log and find an entry where the SecureScore changed from 75 to 80. Which Microsoft Purview feature is most likely responsible for this change?

Accepted Answer

An improvement action was implemented in Compliance Manager.. Option B is correct because Compliance Manager calculates and updates the secure score based on improvement actions. Option A is wrong because the secure score is not directly updated by applying sensitivity labels. Option C is wrong because DLP policies do not directly change the secure score. Option D is wrong because retention policies affect compliance but not the secure score directly.

Answer

A sensitivity label was applied to a document.

Answer

A retention policy was modified.

Answer

A DLP policy was created.

Question 2

Your organization uses Microsoft Purview eDiscovery (Premium) for a legal investigation. You need to collect data from Microsoft Teams chat messages and channel conversations. The case manager wants to search for specific keywords and exclude irrelevant content. What should you do?

Accepted Answer

Create a collection in eDiscovery (Premium) with a KQL query to search Teams data.. Option A is correct because eDiscovery (Premium) allows searching Teams chats and channels with keyword queries and conditions. Option B is wrong because DLP is for preventing data loss, not discovery. Option C is wrong because Content Search (Standard) is less powerful and may not support advanced filtering. Option D is wrong because Communication Compliance is for monitoring, not discovery.

Answer

Use Content Search (Standard) with keyword queries.

Answer

Create a DLP policy to capture matching content.

Answer

Use Communication Compliance to review messages.

Question 3

Your organization is implementing Microsoft Purview Communication Compliance to detect potential insider trading. You need to scan internal emails for specific patterns and assign reviewers from the legal team. What is the minimum number of policies required?

Accepted Answer

One policy with multiple conditions.. Option B is correct because a single Communication Compliance policy can contain multiple conditions (e.g., multiple keywords) and assign reviewers. Option A is wrong because one policy can handle multiple patterns. Option C is wrong because multiple policies are not needed. Option D is wrong because one policy is sufficient.

Answer

Three policies: one for patterns, one for reviewers, and one for storage.

Answer

Zero, as Communication Compliance does not support custom policies.

Answer

Two policies: one for each pattern.

Question 4

A user in your organization receives a 'Message blocked' notification when trying to send an email with a credit card number. The DLP policy is configured to block such emails. The user claims the credit card number is a valid test number used for training. What should you do to allow the email while maintaining security?

Accepted Answer

Configure a policy tip to allow override with a business justification.. Option C is correct because configuring a policy tip with override allows the user to justify the override, which is audited. Option A is wrong because adding to a group bypasses all DLP. Option B is wrong because excluding the user removes protection. Option D is wrong because disabling the policy removes protection for all.

Answer

Exclude the user from the DLP policy.

Answer

Disable the DLP policy temporarily.

Answer

Add the user to the DLP policy's super user group.

Question 5

Your organization uses Microsoft Purview Records Management. You need to declare a document as a regulatory record. Which TWO conditions must be met?

Accepted Answer

The document must have a retention label that is configured to mark items as a regulatory record.. Options A and D are correct because regulatory records require a retention label with regulatory record marking and the location must be in SharePoint or OneDrive with appropriate configuration. Option B is wrong because regulatory records do not require encryption. Option C is wrong because the retention period must be locked, but that is part of the label configuration. Option E is wrong because eDiscovery hold is separate.

Answer

The document must be placed on an eDiscovery hold.

Answer

The retention period must be set to indefinite.

Answer

The document must be encrypted with Microsoft Purview Message Encryption.

Question 6

Refer to the exhibit. You are configuring an auto-labeling policy in Microsoft Purview. The policy is set to apply the 'Confidential' label to documents that contain a specific sensitive info type. However, when a document is auto-labeled, users report that the footer and header are not applied. The label 'Confidential' itself does not have marking configurations. What is the most likely reason?

Accepted Answer

The marking defaults are defined in the policy but the label does not have markings configured.. Option A is correct because the MarkingDefaults in the policy settings apply to all labels if the label itself does not have markings. However, the exhibit shows MarkingDefaults are defined, but they are part of the policy settings, not the label. The auto-labeling policy applies the label, but the markings are not applied because the label does not have them. Option B is wrong because the marking defaults are for the policy, but they might not be applied during auto-labeling. Option C is wrong because client settings are not relevant for auto-labeling. Option D is wrong because the label is published.

Answer

The label is not published to users.

Answer

The Microsoft 365 Apps client is not configured to apply markings.

Answer

The policy settings override the label settings, causing markings to be ignored.

Question 7

Your organization uses Microsoft Purview Data Lifecycle Management. You need to review the disposition of content that has reached the end of its retention period. What should you configure?

Accepted Answer

Enable disposition review in the retention policy or label.. Option C is correct because a disposition review allows managers to review content before permanent deletion. Option A is wrong because retention labels do not require a review unless disposition review is configured. Option B is wrong because eDiscovery holds preserve content. Option D is wrong because DLP policies do not manage disposition.

Answer

Create a DLP policy to notify administrators.

Answer

Place the content on an eDiscovery hold.

Answer

Create a retention label with a retention period.

Question 8

Your company uses Microsoft Purview to manage data classification. A user reports that a sensitive document is being blocked from external sharing even though the applied sensitivity label allows external sharing. The document is stored in SharePoint Online. What should you check first?

Accepted Answer

Check the DLP policies in Microsoft Purview compliance portal for any rules that block external sharing.. The issue is that external sharing is blocked despite a permissive label. This is often caused by a restrictive data loss prevention (DLP) policy overriding the label. Checking DLP policies is the first step. Option A is wrong because sensitivity labels define encryption and marking, not sharing permissions directly. Option C is wrong because SharePoint sharing settings are tenant-wide and affect all content. Option D is wrong because retention policies do not control sharing.

Answer

Verify that the sensitivity label is published to the user.

Answer

Confirm that the document is not under a retention policy.

Answer

Review the SharePoint external sharing settings for the site collection.

Question 9

Your organization needs to ensure that all emails containing credit card numbers are automatically encrypted before being sent to external recipients. Which Microsoft Purview solution should you configure?

Accepted Answer

Configure a DLP policy that uses the 'Encrypt email messages' action.. The requirement is to automatically encrypt emails based on content (credit card numbers). Microsoft Purview Message Encryption can be triggered by a DLP policy that detects sensitive information types. Option B is incorrect because sensitivity labels are manually applied. Option C is incorrect because Data Lifecycle Management handles retention and deletion. Option D is incorrect because Communication Compliance monitors for policy violations, not encryption.

Answer

Create a sensitivity label that applies encryption and auto-labeling.

Answer

Set up a retention policy with encryption.

Answer

Implement a Communication Compliance policy.

Question 10

Refer to the exhibit. You are reviewing a Microsoft Purview Data Lifecycle Management policy. A document labeled 'Personal Data' also contains EU_Deceased_Data. What is the retention outcome for this document?

Accepted Answer

The document is retained for 365 days, then deleted.. The policy has two rules. The first rule retains for 365 days if the sensitivity label is 'Personal Data'. The second rule deletes after 90 days if content contains EU_Deceased_Data. When both conditions are met, Microsoft Purview applies the longer retention period (retain 365 days) because retention takes precedence over deletion. Option A is incorrect because the retain rule applies. Option B is incorrect because the retain rule overrides. Option C is incorrect because the rules are not exclusive; both conditions are evaluated.

Answer

The document is deleted after 90 days.

Answer

The document is retained indefinitely because of conflicting rules.

Answer

The document is deleted immediately because it contains sensitive data.

Question 11

Your organization uses Microsoft Purview Information Protection. You need to ensure that when users manually apply a 'Confidential' label to a document in Word, the document is automatically marked with a footer 'CONFIDENTIAL' and encrypted. What must you configure?

Accepted Answer

Configure the sensitivity label's settings to include the footer and encryption.. Sensitivity labels include settings for marking (footer) and encryption. These are configured in the label itself. Option A is incorrect because DLP policies do not apply markings. Option C is incorrect because auto-labeling is for automatic application, not manual. Option D is incorrect because the sensitivity label policy publishes labels but doesn't define their actions.

Answer

Modify the sensitivity label policy to include the footer.

Answer

Create a DLP rule that applies the footer and encryption.

Answer

Set up auto-labeling to apply the footer and encryption.

Question 12

A company uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. They recently deployed Microsoft Copilot for Microsoft 365. Users can now ask Copilot to summarize documents that contain sensitive information. How should the company extend DLP protection to Copilot interactions?

Accepted Answer

Enable DLP for Copilot in the DLP policy settings.. Microsoft Purview DLP can now cover Microsoft Copilot for Microsoft 365 interactions. This is done by enabling DLP for Copilot in the DLP policy settings. Option B is incorrect because sensitivity labels alone don't block Copilot. Option C is incorrect because Communication Compliance monitors internal communications, not Copilot. Option D is incorrect because Information Barriers are for restricting communication between groups.

Answer

Apply a sensitivity label that restricts Copilot access.

Answer

Implement Information Barriers for Copilot.

Answer

Configure a Communication Compliance policy to monitor Copilot.

Question 13

Your organization needs to automatically detect and classify documents containing passport numbers in SharePoint Online. Which Microsoft Purview feature should you use?

Accepted Answer

Auto-labeling with sensitivity labels.. Auto-labeling in Microsoft Purview can automatically apply sensitivity labels to documents that contain sensitive information types like passport numbers. Option B is incorrect because DLP policies detect and protect but don't classify. Option C is incorrect because Data Lifecycle Management is for retention. Option D is incorrect because eDiscovery is for search and export.

Answer

eDiscovery (Premium).

Answer

Data Lifecycle Management (DLM) policy.

Answer

Data Loss Prevention (DLP) policy.

Question 14

A user has a document in SharePoint Online that is subject to a retention policy with a retention period of 5 years. The user attempts to delete the document but receives an error. What is the most likely reason?

Accepted Answer

The document is under a retention policy that preserves it.. Retention policies prevent users from permanently deleting documents during the retention period. Users can delete, but the document is retained in a preservation hold library. Option A is incorrect because sensitivity labels don't prevent deletion. Option B is incorrect because DLP policies block sharing, not deletion. Option C is incorrect because eDiscovery holds are legal holds, not retention policies.

Answer

A DLP policy blocks deletion of the document.

Answer

The document has a sensitivity label that prohibits deletion.

Answer

The document is under an eDiscovery hold.

Question 15

Your organization uses Microsoft Purview Compliance Manager. You need to assign a control to a specific user for implementation. What should you do?

Accepted Answer

Edit the control and assign a new owner.. In Compliance Manager, controls can be assigned to users for implementation and testing. This is done by editing the control details and assigning an owner. Option A is incorrect because DLP policies are not used for assignment. Option B is incorrect because assessments are for scoring, not assignment. Option C is incorrect because roles are not assigned to controls directly.

Answer

Assign the user the Compliance Manager role.

Answer

Create a DLP policy to enforce the control.

Answer

Modify the assessment to include the user.

MS-102 Manage compliance by using Microsoft Purview Practice Test 7 — 15 Questions

Exhibit

MS-102 Manage compliance by using Microsoft Purview Practice Test 7 — 15 Questions

Exhibit