MS-102 Manage compliance by using Microsoft Purview Practice Test 9 — 15 Questions

Question 1

A compliance officer needs to mark documents in a SharePoint Online library as regulatory records. These records must be immutable (cannot be modified or deleted) for 3 years. After 3 years, a disposition review must be initiated to decide if the records can be deleted. Which Microsoft Purview solution should the officer configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Retention label configured to mark items as records with a retention period of 3 years and disposition review. A retention label configured to mark items as regulatory records enforces immutability (no modification or deletion) for the specified retention period of 3 years. After the retention period expires, the disposition review triggers a workflow where a reviewer must approve or reject deletion, meeting the compliance officer's requirement exactly.

Answer

Data Lifecycle Management retention policy with disposition review

Answer

Sensitivity label with encryption

Answer

eDiscovery case with hold

Question 2

A compliance officer needs to automatically identify and label content that is conceptually similar to existing sensitive documents, such as internal strategy memos or proprietary technical specifications, without relying on explicit keywords or recognized sensitive information types. Which Microsoft Purview solution should the officer use to achieve this?

Accepted Answer

trainable classifier. A trainable classifier uses machine learning to identify content based on patterns and context learned from sample documents, making it ideal for recognizing conceptually similar content without relying on explicit keywords or predefined sensitive information types. This allows the compliance officer to automatically label internal strategy memos or proprietary technical specifications that share conceptual similarity with existing sensitive documents.

Answer

sensitive information type

Answer

An auto-labeling policy with a retention label

Answer

Data Loss Prevention (DLP) policy that blocks sharing

Question 3

You are the Microsoft 365 Administrator for a multinational organization that must comply with various regulatory requirements, including GDPR, SOX, and internal data retention policies. You are deploying Microsoft Purview compliance solutions. Which four of the following actions are valid steps when managing compliance using Microsoft Purview? (Choose all that apply. There are four correct answers.)

Accepted Answer

Create a DLP policy that prevents users from sharing credit card numbers via email with external recipients.. Creating a DLP policy that prevents sharing credit card numbers via email with external recipients is a valid step because Microsoft Purview Data Loss Prevention (DLP) policies can detect sensitive information types (e.g., credit card numbers) and enforce actions such as blocking external sharing. This directly supports compliance with regulations like GDPR and SOX by preventing unauthorized data exfiltration.

Answer

Assign a retention policy to a user's mailbox that deletes all emails immediately after they are sent.

Answer

Apply a sensitivity label to a SharePoint site that blocks all external sharing of documents stored in that site.

Question 4

Drag and drop the steps to configure Data Loss Prevention (DLP) policies in Microsoft Purview in the correct order.

Accepted Answer

Create DLP policy, Define conditions and actions, Test the policy, Deploy the policy. DLP policies are created in Purview, conditions and actions defined, and then deployed after testing.

Answer

Define conditions and actions, Create DLP policy, Test the policy, Deploy the policy

Answer

Create DLP policy, Define conditions and actions, Deploy the policy, Test the policy

Answer

Create DLP policy, Test the policy, Define conditions and actions, Deploy the policy

Question 5

Match each Microsoft 365 role to its administrative scope.

Accepted Answer

Global Administrator: Full access to all administrative features. These roles are part of Microsoft Entra ID role-based access control. The correct matches are: Global Administrator (full access), User Administrator (users/groups), Exchange Administrator (Exchange settings). Common confusions include mixing Global and User Administrator scopes, or User and Exchange Administrator scopes.

Answer

Global Administrator: Manage only user accounts and licenses

Answer

User Administrator: Manage email settings and policies

Answer

Billing Administrator: Manage security and compliance policies

Question 6

Match each Microsoft 365 migration tool to its use case.

Accepted Answer

Exchange Migration (cutover): Migrate entire on-premises Exchange organization to Exchange Online in a single batch. Correct matches: Exchange Migration (cutover) migrates entire on-premises Exchange organization; SPMT migrates files and SharePoint content; Mover migrates files from cloud storage; Microsoft Entra Connect synchronizes identities. Common confusions include mixing the purpose of Mover with Exchange migration and SPMT with identity synchronization.

Answer

Exchange Migration (cutover): Migrate files from cloud storage providers to OneDrive

Answer

SharePoint Migration Tool: Synchronize on-premises identities

Question 7

Your organization uses Microsoft Purview to enforce data loss prevention (DLP) policies. Users report that a DLP policy blocks legitimate sharing of a document containing sensitive financial data. You need to allow the sharing while still protecting the data. What should you do?

Accepted Answer

Configure a policy tip to allow override with a business justification.. Configuring a policy tip to allow override with a business justification enables users to legitimately share the document while still being audited. Policy tips notify users when their action violates a DLP policy and allow them to override with a justification, which is logged for review. Option A is wrong because disabling the policy removes protection entirely. Option B is wrong because adding a user to a super user group bypasses all DLP checks, which is not appropriate. Option C is wrong because excluding the document type could weaken protection for all similar documents.

Answer

Disable the DLP policy and create a new one with broader conditions.

Answer

Add the user to the DLP policy's super user group.

Answer

Modify the DLP policy to exclude the specific document type.

Question 8

A company needs to automatically retain all emails sent to or from external partners for 7 years. They also need to ensure that after 7 years, the emails are permanently deleted. What should you configure in Microsoft Purview?

Accepted Answer

Create a retention policy for Exchange email with a retention period of 7 years, followed by deletion.. A retention policy in Microsoft Purview can be scoped to Exchange email and configured with a 7-year retention period followed by permanent deletion. This automatically applies to all mailboxes and meets both the retain and delete requirements without user action.

Answer

Create a retention label with a retention period of 7 years and publish it to all users.

Answer

Create an eDiscovery hold for all external partner communications.

Answer

Create a data loss prevention (DLP) policy to block deletion of emails after 7 years.

Question 9

Your organization uses Microsoft Purview Compliance Manager to manage compliance activities. Which TWO actions can be performed directly from Compliance Manager?

Accepted Answer

Assign an improvement action to a user.. Compliance Manager is a solution within Microsoft Purview that provides a centralized dashboard for managing compliance activities. It allows you to assign improvement actions to specific users to track responsibility and progress, and to upload evidence files directly to an improvement action to demonstrate compliance with a control. These are core, direct functions of the Compliance Manager interface.

Answer

View and manage DLP alerts.

Answer

Create a retention policy for Exchange Online.

Answer

Create a sensitivity label.

Question 10

Your company is implementing Microsoft Purview Data Loss Prevention (DLP) to protect credit card numbers in emails. Which THREE actions can a DLP policy take when a match is found?

Accepted Answer

Allow the user to override the block with a business justification.. Option C is correct because Microsoft Purview DLP policies can be configured with user override capabilities, allowing users to provide a business justification to bypass a block action when a sensitive information match is detected. Option D is correct because DLP policies can display policy tips to users in supported workloads like Outlook, notifying them that their email contains sensitive content and explaining the policy that triggered the match. Option E is correct because blocking the email from being sent is a core DLP enforcement action that prevents the message containing credit card numbers from leaving the organization. Option A is incorrect because DLP policies do not retroactively delete emails from a recipient's inbox; they act at send time or at rest through retention/retention labels, not as a DLP match action. Option B is incorrect because DLP policies do not automatically encrypt emails as a match action; encryption is handled through sensitivity labels, Azure Information Protection, or Exchange mail flow rules, not DLP policy actions.

Answer

Delete the email from the recipient's inbox.

Answer

Encrypt the email automatically.

Question 11

Refer to the exhibit. You are reviewing a Microsoft Purview auto-labeling policy configuration. The SensitivityTypes GUID corresponds to a sensitive info type that detects credit card numbers. The LabelId is for a 'Confidential' label. Users report that documents containing credit card numbers are not being automatically labeled. What is the most likely reason?

Accepted Answer

The auto-labeling policy is not scoped to the correct locations (e.g., SharePoint, Exchange).. Auto-labeling policies in Microsoft Purview must be scoped to the locations where the sensitive data resides (Exchange, SharePoint, OneDrive, etc.). If the policy is not scoped to the correct locations, documents containing credit card numbers in those locations will never be evaluated, so no automatic labeling occurs. This is the most common configuration oversight when auto-labeling appears to do nothing.

Answer

The 'Confidential' label is not published to users.

Answer

The sensitive info type GUID is incorrect.

Answer

Users do not have the appropriate license for auto-labeling.

Question 12

Refer to the exhibit. You run the Get-RetentionCompliancePolicy cmdlet and see the output. Your organization wants to retain all ProjectX documents for 10 years and then allow users to delete them. However, users complain that documents are being deleted automatically. What is the issue?

Accepted Answer

The policy is disabled, so it should not be enforcing.. The policy is disabled (Enabled: False), so it is not enforcing any retention or deletion actions. However, users are complaining that documents are being deleted automatically, which cannot be caused by this disabled policy. The issue is likely another policy or process. Option A is incorrect because even if the retention action is 'Delete', it has no effect since the policy is disabled. Option C is incorrect because Mode 'Enable' means the policy is active when enabled, but since it is disabled, mode is irrelevant. Option D is incorrect because 'DateCreated' is a valid retention trigger.

Answer

The retention action is set to Delete instead of NoAction.

Answer

The mode is set to Enable, which means the policy is in test mode.

Answer

The retention trigger is set to DateCreated, which is incorrect.

Question 13

Your organization uses Microsoft Purview eDiscovery (Premium) for a legal investigation. You need to collect data from Microsoft Teams chat messages and channel conversations. The case manager wants to search for specific keywords and exclude irrelevant content. What should you do?

Accepted Answer

Create a collection in eDiscovery (Premium) with a KQL query to search Teams data.. EDiscovery (Premium) collections allow searching Microsoft Teams chat messages and channel conversations using KQL queries with conditions to include specific keywords and exclude irrelevant content. Option A is incorrect because Content Search (Standard) is less powerful and lacks advanced filtering capabilities for Teams data. Option B is incorrect because DLP policies are designed for data loss prevention, not legal discovery. Option C is incorrect because Communication Compliance is for monitoring communications, not for eDiscovery searches.

Answer

Use Content Search (Standard) with keyword queries.

Answer

Create a DLP policy to capture matching content.

Answer

Use Communication Compliance to review messages.

Question 14

Your organization is implementing Microsoft Purview Communication Compliance to detect potential insider trading. You need to scan internal emails for specific patterns and assign reviewers from the legal team. What is the minimum number of policies required?

Accepted Answer

One policy with multiple conditions.. A single Communication Compliance policy can contain multiple conditions (such as sensitive info types, keyword dictionaries, and trainable classifiers) and can define multiple reviewers or reviewer groups within the same policy. Since the requirement is to scan internal emails for specific patterns AND assign legal reviewers, both can be configured inside one policy, making one the minimum number required.

Answer

Three policies: one for patterns, one for reviewers, and one for storage.

Answer

Zero, as Communication Compliance does not support custom policies.

Answer

Two policies: one for each pattern.

Question 15

A user in your organization receives a 'Message blocked' notification when trying to send an email with a credit card number. The DLP policy is configured to block such emails. The user claims the credit card number is a valid test number used for training. What should you do to allow the email while maintaining security?

Accepted Answer

Configure a policy tip to allow override with a business justification.. Configuring a policy tip with override allows the user to justify the override with a business justification, which is audited. This maintains security by notifying the user and recording the override for compliance. Option B (excluding the user) removes DLP protection entirely for that user, which is insecure. Option C (disabling the policy) disables protection for all users. Option D (adding to super user group) bypasses all DLP checks for the user, which is too permissive.

Answer

Exclude the user from the DLP policy.

Answer

Disable the DLP policy temporarily.

Answer

Add the user to the DLP policy's super user group.