MS-102 Manage compliance by using Microsoft Purview Practice Test 8 — 15 Questions

Question 1

Your company is implementing Microsoft Purview Audit (Standard). You need to search for activities performed by a specific user in Exchange Online. Which log should you query?

Accepted Answer

Unified audit log.. Audit (Standard) records all user and admin activities in Exchange Online. The unified audit log is the correct source. Option A is incorrect because Azure AD audit logs are for identity activities. Option C is incorrect because DLP reports are for DLP matches. Option D is incorrect because Mailbox audit logs are a subset but unified audit log is the comprehensive source.

Answer

DLP incident reports.

Answer

Azure AD audit logs.

Answer

Mailbox audit logs only.

Question 2

Which TWO Microsoft Purview solutions can be used to detect and prevent the unauthorized sharing of sensitive information in Microsoft Teams messages?

Accepted Answer

Communication Compliance. DLP policies can scan Teams messages for sensitive content and block sharing. Communication Compliance can monitor messages for policy violations and take action. Sensitivity labels are for classification, not detection. Information Barriers restrict communication between groups. eDiscovery is for investigation after the fact.

Answer

eDiscovery (Premium)

Answer

Sensitivity labels

Answer

Information Barriers

Question 3

Which THREE actions can be taken by a Microsoft Purview Data Loss Prevention (DLP) policy in Exchange Online?

Accepted Answer

Block the email from being sent. DLP policies in Exchange Online can block sending, encrypt the message, and notify the sender with a policy tip. Justifying override is not an action; it's a user response. Blocking all emails is not granular; DLP actions are rule-based.

Answer

Allow the sender to override the block

Answer

Block all emails from the sender

Question 4

Which TWO Microsoft Purview solutions are primarily used for data classification?

Accepted Answer

Auto-labeling. Auto-labeling applies labels based on sensitive info types. Sensitivity labels are the classification labels themselves. DLP is for protection. Data Lifecycle Management is for retention. Communication Compliance is for monitoring.

Answer

Data Loss Prevention

Answer

Communication Compliance

Answer

Data Lifecycle Management

Question 5

Refer to the exhibit. You run a Content Search in Microsoft Purview eDiscovery (Standard) for emails containing a specific keyword. The result shows one item in the DeletedItems folder. What is the most likely reason this email appears?

Accepted Answer

The email is in the Recoverable Items folder.. Content Search searches all mailboxes, including the Recoverable Items folder (which contains soft-deleted items). The DeletedItems folder is searched by default. Option A is incorrect because the item is in DeletedItems, not in-place hold. Option B is incorrect because retention policies preserve items but the item is still in DeletedItems. Option D is incorrect because the search includes DeletedItems by default.

Answer

The email was permanently deleted but retained by a retention policy.

Answer

The search includes deleted items by default.

Answer

The email is under an in-place hold.

Question 6

Your organization uses Microsoft Purview Records Management. You need to ensure that when a document is declared a record, it cannot be edited or deleted by users. Which type of record should you use?

Accepted Answer

Regulatory record. Regulatory records are locked and cannot be edited or deleted, even by admins. Standard records can be edited by admins or users with certain permissions. Option A is incorrect because standard records can be edited. Option C is incorrect because retention labels don't make records. Option D is incorrect because there is no distinction between regular and regulatory in that way.

Answer

Regular record

Answer

Standard record

Answer

Retention label with record setting

Question 7

Your company uses Microsoft Purview Data Lifecycle Management. You have a policy that retains items for 3 years and then deletes them. A user places an eDiscovery hold on a folder that contains items subject to this policy. What happens to those items after 3 years?

Accepted Answer

They are preserved until the hold is removed.. eDiscovery hold takes precedence over deletion. Items under hold are preserved indefinitely until the hold is released. Option A is incorrect because the hold overrides the policy. Option C is incorrect because the hold preserves items. Option D is incorrect because items are not transferred.

Answer

They are retained for an additional 3 years.

Answer

They are deleted after 3 years.

Answer

They are moved to a separate location.

Question 8

Your organization uses Microsoft 365 E5 licenses. You need to configure retention labels to automatically retain emails related to ongoing litigation for 5 years and then delete them. The labels must be applied based on specific keywords in the email subject. What should you use?

Accepted Answer

Use an auto-apply retention label with a trainable classifier.. Auto-apply retention labels with a trainable classifier can apply labels based on keywords. Option C is correct because trainable classifiers can be configured to match subject keywords. Option A is wrong because retention policies apply to all content in a location, not based on keywords. Option B is wrong because default labels apply to all items in a library or folder. Option D is wrong because sensitivity labels focus on protection, not retention.

Answer

Configure a default retention label on the mailbox.

Answer

Deploy a sensitivity label with auto-labeling for Exchange.

Answer

Create a retention policy applied to Exchange email.

Question 9

Your company has a Microsoft 365 E5 subscription. You need to prevent users from sharing files containing credit card numbers with external users. What should you configure?

Accepted Answer

A DLP policy that blocks sharing of content with sensitive info type.. Data Loss Prevention (DLP) policies can detect sensitive information like credit card numbers and block sharing. Option B is correct. Option A is wrong because retention policies manage lifecycle, not prevent sharing. Option C is wrong because sensitivity labels require manual or automatic classification but do not block sharing directly. Option D is wrong because information barriers restrict communication between groups, not data sharing.

Answer

A retention policy for SharePoint sites.

Answer

An information barrier policy.

Answer

A sensitivity label with encryption.

Question 10

Your organization uses Microsoft Purview Data Lifecycle Management. You need to ensure that after an employee leaves, their OneDrive content is retained for 7 years and then automatically deleted. The retention label must be applied automatically when the employee is marked as inactive in Microsoft Entra ID. What should you configure?

Accepted Answer

Create an auto-apply retention label with adaptive scope for inactive users.. A retention label auto-applied based on a Microsoft Entra ID attribute can target inactive users. Option D is correct because you can create an adaptive scope for inactive users and apply a retention label. Option A is wrong because retention policies apply to all content, not selectively. Option B is wrong because default labels apply to new content, not existing. Option C is wrong because manual labels require user action.

Answer

Instruct users to manually apply a retention label to their OneDrive.

Answer

Configure a default retention label on the OneDrive library.

Answer

Create a retention policy for OneDrive with a 7-year retention period.

Question 11

You are a compliance administrator. You need to search for emails that contain trade secrets sent by a specific user in the last month. The search must include all mailboxes. What should you use?

Accepted Answer

Content search in Microsoft Purview.. Content search in Microsoft Purview allows searching across mailboxes for specific keywords and date ranges. Option A is correct. Option B is wrong because eDiscovery (Premium) is for advanced workflows, not basic search. Option C is wrong because audit log search tracks activities, not content. Option D is wrong because DLP reports show policy matches, not content search.

Answer

eDiscovery (Premium) case.

Answer

Data Loss Prevention reports.

Answer

Audit log search.

Question 12

Your organization uses Microsoft Purview Records Management. You need to ensure that records are marked as regulatory records and cannot be deleted or modified by any user, including administrators. The records must be retained for 10 years. What should you do?

Accepted Answer

Use a retention label marked as a regulatory record.. Regulatory records provide the highest level of restriction, making content tamper-proof. Option D is correct. Option A is wrong because preservation lock applies to retention policies, not individual records. Option B is wrong because default labels can be changed. Option C is wrong because manual labels are not as restrictive.

Answer

Create a retention policy with a preservation lock.

Answer

Use a retention label marked as a record.

Answer

Apply a default retention label to the SharePoint library.

Question 13

You need to implement a solution that allows users to classify documents containing personal data as 'Highly Confidential' and automatically encrypt them when shared via email. What should you configure?

Accepted Answer

A sensitivity label with auto-labeling and encryption.. Sensitivity labels can apply encryption automatically when content is shared. Option B is correct. Option A is wrong because DLP policies block or monitor, not encrypt. Option C is wrong because retention labels manage lifecycle. Option D is wrong because information barriers restrict communication.

Answer

A retention label with a disposition action.

Answer

An information barrier policy.

Answer

A DLP policy with an action to block sharing.

Question 14

Your company is migrating from an on-premises file server to SharePoint Online. You need to ensure that files containing personally identifiable information (PII) are automatically detected and classified with a sensitivity label. What should you use?

Accepted Answer

Auto-labeling for sensitivity labels in Microsoft 365.. Auto-labeling for sensitivity labels can scan files at rest in SharePoint and apply labels based on sensitive info types. Option C is correct. Option A is wrong because Microsoft Information Protection scanner is for on-premises file servers, not SharePoint. Option B is wrong because DLP policies do not apply labels. Option D is wrong because retention labels are for lifecycle, not classification.

Answer

A retention label auto-applied by a trainable classifier.

Answer

Microsoft Information Protection scanner.

Answer

A DLP policy to block sharing of PII.

Question 15

Your organization has a Microsoft 365 E5 subscription and uses Microsoft Teams. You need to prevent external users from being added to sensitive teams that contain financial data. What should you configure?

Accepted Answer

A sensitivity label for containers that blocks guest access.. Sensitivity labels for containers can restrict guest access. Option D is correct. Option A is wrong because DLP policies monitor content, not guest access. Option B is wrong because Azure AD Conditional Access controls sign-in, not team membership. Option C is wrong because information barriers restrict communication, not guest access.

Answer

Azure AD Conditional Access policy for guest users.

Answer

An information barrier policy between finance and external.

Answer

A DLP policy for Teams chat and channel messages.