MS-102 Manage compliance by using Microsoft Purview Practice Test 7 — 15 Questions

Question 1

Refer to the exhibit. You have a DLP policy in test mode as shown. A user reports that they received a notification that sharing credit card numbers is blocked, but they were still able to share them. What is the most likely reason?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The policy is in test mode, which does not enforce actions.. When a DLP policy is in test mode, it notifies users but does not actually block the action. Option A is wrong because the rule includes the action BlockAccess, but test mode overrides it. Option C is wrong because the condition is valid. Option D is wrong because the notification is enabled in the rule and policy.

Answer

The rule action 'BlockAccess' is not included in the policy.

Answer

The condition 'SensitiveInformation' is not configured correctly.

Answer

The notification is not enabled in the policy.

Question 2

You need to ensure that all documents in a SharePoint Online site are automatically labeled with a 'Confidential' sensitivity label. Which Microsoft Purview feature should you use?

Accepted Answer

Microsoft Purview auto-labeling policy. Auto-labeling policies can automatically apply sensitivity labels to documents in SharePoint Online based on conditions. Option B is wrong because Data Loss Prevention policies detect and protect sensitive data but do not apply labels. Option C is wrong because retention policies manage data retention and deletion, not sensitivity labels. Option D is wrong because manual labeling requires user action, not automatic application.

Answer

Microsoft Purview Data Loss Prevention policy

Answer

Microsoft Purview retention policy

Answer

Microsoft Purview manual labeling

Question 3

Your organization receives a data subject request (DSR) to export personal data of a user. Which Microsoft Purview solution should you use to search for and export the data?

Accepted Answer

Microsoft Purview eDiscovery. Microsoft Purview eDiscovery allows you to search for content across Microsoft 365 and export it, which is necessary to fulfill a data subject request (DSR) to export personal data. Option A is incorrect because retention policies are used to retain data for a specified period, not to export it. Option B is incorrect because audit logs track activities but do not provide content search or export capabilities. Option D is incorrect because Data Loss Prevention (DLP) is designed to prevent data leaks, not to export data.

Answer

Microsoft Purview retention policies

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Data Loss Prevention

Question 4

Refer to the exhibit. You have two DLP compliance rules as shown. A user sends an email containing both PII and credit card numbers. Which rule will be applied?

Accepted Answer

Both rules will be evaluated, and the most restrictive action will be applied.. The DLP system evaluates all rules and applies the most restrictive action. Since both rules have BlockAccess, both would block, but in practice, the system applies the highest priority rule (lowest number) or the most restrictive. In this case, both have BlockAccess, so the rule with priority 1 (Block Credit Cards) takes precedence. However, the correct answer is that both rules are evaluated and the most restrictive action is applied; since both block, the block action from either is applied. But given the options, D correctly states that both rules are evaluated and the most restrictive action is taken.

Answer

Block PII rule only

Answer

Block Credit Cards rule only

Answer

Neither rule will apply because they conflict.

Question 5

Your organization uses Microsoft Purview to manage compliance. You need to ensure that all documents containing 'Project X' are automatically retained for 5 years. Which solution should you use?

Accepted Answer

Microsoft Purview retention policies with adaptive scopes. Microsoft Purview retention policies with adaptive scopes allow you to automatically retain content based on conditions such as sensitive information types or specific keywords. In this scenario, you can create a retention policy with an adaptive scope that targets documents containing 'Project X' and set the retention period to 5 years. Option A is wrong because sensitivity labels are used for classification and protection, not directly for automated retention based on content. Option B is wrong because Audit tracks user and admin activities, not retention enforcement. Option C is wrong because Data Loss Prevention (DLP) prevents data leakage, not retention.

Answer

Microsoft Purview sensitivity labels

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Data Loss Prevention

Question 6

Refer to the exhibit. You are configuring Microsoft Purview Records Management. You have a document that is classified under 'Finance' department and 'Invoices' category. Which retention label will be applied if both labels are auto-applied based on the same condition?

Accepted Answer

Finance Retention. When multiple retention labels are auto-applied based on the same condition in Microsoft Purview Records Management, the system applies the label with the longest retention period. In this scenario, 'Finance Retention' retains documents for 7 years, while 'HR Retention' retains for 5 years. Therefore, 'Finance Retention' is applied. Option A is incorrect because the system does not apply both labels; it chooses one based on retention period. Option B is incorrect because 'HR Retention' has a shorter retention period. Option D is incorrect because a label is applied; there is no conflict as long as the labels are from different categories.

Answer

Both labels will be applied, causing a conflict.

Answer

HR Retention

Answer

No label will be applied because of the conflict.

Question 7

Your organization uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. Users report that they are unable to share files containing credit card numbers via email. You need to allow sharing with specific business partners while maintaining protection for all other recipients. What should you configure?

Accepted Answer

Configure the DLP policy to allow users to override the action with a business justification.. Microsoft Purview DLP policies can be configured to allow users to override a blocking action by providing a business justification. This is useful for scenarios where legitimate sharing with business partners is needed while still blocking sharing with unauthorized recipients. The override action can be audited for compliance. Option B is incorrect because DLP policies are evaluated in priority order; a lower priority policy cannot override a higher priority policy's action. Option C is incorrect because sensitivity labels classify and protect data but do not override DLP policy actions. Option D is incorrect because file policies in Microsoft Purview Information Protection are not used for email content inspection; DLP policies are used for that purpose.

Answer

Create a separate DLP policy with lower priority that allows sharing with the partners.

Answer

Assign a custom sensitivity label to emails sent to the partners.

Answer

Configure a file policy in Microsoft Purview Information Protection to exempt the partners.

Question 8

Your company is implementing Microsoft Purview Records Management. You need to ensure that invoices are retained for seven years after they are paid, and then automatically deleted. Which type of label should you create?

Accepted Answer

Retention label with disposition review after the trigger event. A retention label with a disposition review after a trigger event can automate deletion after a specified period (7 years) triggered by an event (invoice payment). Option A is incorrect because a disposition review label requires manual review before deletion, whereas the requirement is automatic deletion. Option B is incorrect because a retention policy applies to all documents in a location and cannot be scoped to specific items based on metadata like payment date. Option D is incorrect because sensitivity labels are for classification and protection, not retention management.

Answer

Disposition review label assigned to invoices

Answer

Retention policy applied to all documents in SharePoint

Answer

Sensitivity label with auto-labeling

Question 9

Your organization uses Microsoft Purview Data Lifecycle Management and has a retention policy that retains all SharePoint documents for three years. However, for a specific research project, you need to retain documents for five years after the project ends. Some documents are already marked with a different retention label. What should you do?

Accepted Answer

Apply a retention label with a five-year retention period to the research documents.. Retention labels applied at the item level take precedence over retention policies. Since the research project documents need a five-year retention, applying a new retention label with that period will override the existing policy. Option A is incorrect because modifying the policy to exclude the site does not affect documents already labeled. Option C is incorrect because removing the existing labels would cause the policy to apply, resulting in three-year retention. Option D is incorrect because a new policy would apply to the site but would not override existing labels on documents; labels take precedence.

Answer

Modify the existing retention policy to exclude the research project site.

Answer

Remove the existing retention labels from the research documents and rely on the policy.

Answer

Create a new retention policy that applies to the research project site and set the retention period to five years.

Question 10

Your organization uses Microsoft Purview Audit (Standard) for auditing user activity. You receive an alert that a user accessed sensitive files in SharePoint Online. You need to investigate the exact actions performed by the user. Which action should you take?

Accepted Answer

Enable Audit (Premium) licensing for the user and then search the audit log.. Audit (Standard) only retains audit logs for 90 days and does not include detailed file-level operations like item access. You would need to upgrade to Audit (Premium) to get those details. Option A is incorrect because the Search-UnifiedAuditLog cmdlet works with both editions but may not show item-level details in Standard. Option B is incorrect because although the Audit Log Search tab exists in the Purview portal, with Audit (Standard) it does not log detailed file operations like accessing specific files; you need Audit (Premium) for that. Option D is incorrect because Compliance Manager is used for managing compliance frameworks and assessments, not for reviewing audit logs.

Answer

Run the Search-UnifiedAuditLog cmdlet in Exchange Online PowerShell.

Answer

Navigate to the Microsoft Purview portal and use the Audit Log Search tab.

Answer

Access Microsoft Purview Compliance Manager and review the user's activity.

Question 11

A company uses Microsoft Purview Information Protection to classify and protect sensitive data. They have configured auto-labeling policies for Microsoft 365 apps. However, users report that some documents containing credit card numbers are not being labeled automatically. You verify that the sensitive info type for credit cards is correctly defined. What is the most likely cause?

Accepted Answer

The documents are stored in on-premises file shares, not in SharePoint or OneDrive.. Auto-labeling policies can only label documents that are stored in Microsoft 365 (SharePoint Online, OneDrive for Business) or Exchange Online, not on-premises file shares. Option A is incorrect because auto-labeling is not limited to Word, Excel, PowerPoint; it also works for other formats. Option C is incorrect because sensitivity labels can be configured for auto-labeling. Option D is incorrect because the DLP policy does not affect auto-labeling.

Answer

The auto-labeling policy only applies to Word, Excel, and PowerPoint files.

Answer

The sensitivity label used for auto-labeling is not published to users.

Answer

The DLP policy for credit cards is blocking the auto-labeling process.

Question 12

Your organization needs to prevent users from sharing documents containing personally identifiable information (PII) with external users. You have Microsoft Purview Data Loss Prevention (DLP) deployed. What should you configure?

Accepted Answer

Create a DLP policy that detects PII and restricts sharing to external users.. A DLP policy can be configured to detect PII and block external sharing. Option A is incorrect because sensitivity labels classify data but do not directly control external sharing; they can be used with DLP policies but alone cannot block sharing. Option C is incorrect because conditional access policies control access based on conditions like location or device, not content. Option D is incorrect because auditing only logs sharing activities, it does not prevent them.

Answer

Apply a sensitivity label that blocks external sharing.

Answer

Configure a conditional access policy in Microsoft Entra ID to block external sharing.

Answer

Enable auditing for all document sharing activities.

Question 13

Your organization uses Microsoft Purview Records Management and has a file plan that categorizes records by department. You need to ensure that HR records are retained for seven years after employee termination, while finance records are retained for ten years after the end of the fiscal year. What is the most efficient way to implement this?

Accepted Answer

Create two retention labels: one for HR with termination trigger and seven-year retention, and one for Finance with end-of-fiscal-year trigger and ten-year retention.. You need different retention triggers and periods for HR and Finance records. Creating two separate retention labels—one for HR with a termination trigger and seven-year retention, and one for Finance with an end-of-fiscal-year trigger and ten-year retention—allows you to apply the appropriate settings to each department's documents. Option A is incorrect because a single retention label cannot have multiple trigger events or retention periods. Option C is incorrect because the file plan is used to categorize and manage labels, but the actual retention settings must be defined within individual retention labels, not directly in the file plan. Option D is incorrect because retention policies are used to assign labels at scale, but the labels themselves need to be created first; creating policies without labels does not achieve the required granularity.

Answer

Create a single retention label with a trigger event and adjust the retention period using PowerShell.

Answer

Define the retention settings in the file plan and apply them to both departments.

Answer

Create two retention policies, one for HR and one for Finance, each with the appropriate retention period.

Question 14

Your company uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data in Microsoft Teams. Users are sharing credit card numbers in Teams chat messages. You have a DLP policy that detects credit card numbers and blocks the message. However, users report that they can still send messages containing credit card numbers without any block. What is the most likely reason?

Accepted Answer

The DLP policy for Teams is only applied when external users are part of the chat.. DLP for Teams chat messages only scans messages that include at least one user from outside the organization (external users). If both sender and recipient are internal, the policy does not apply. Option B is incorrect because DLP policies can be scoped to specific users. Option C is incorrect because Teams DLP policies cover both chat and channel messages. Option D is incorrect because DLP policies apply to both persistent and transient messages.

Answer

The DLP policy does not apply to transient messages like chat.

Answer

The DLP policy is not configured to include the users' group.

Answer

The DLP policy only applies to channel messages, not private chats.

Question 15

Your organization uses Microsoft Purview Communication Compliance to detect inappropriate messages in Microsoft Teams. You need to define policies that automatically detect and review messages containing profanity or harassment. Which built-in classifier should you use?

Accepted Answer

Harassment classifier. The 'Harassment' classifier is specifically designed to detect harassing or threatening language in Microsoft Teams. Option C is incorrect because the 'Profanity' classifier only detects swear words, not harassment. Option B is incorrect because the 'Sensitive info types' classifier detects sensitive data like credit cards, not harassment. Option D is incorrect because the 'Threat' classifier detects threats, which is narrower than harassment.

Answer

Sensitive info types classifier

Answer

Profanity classifier

Answer

Threat classifier