MS-102 Manage compliance by using Microsoft Purview — Timed 20 Questions

Question 1

A compliance officer needs to automatically classify documents in SharePoint Online that contain credit card numbers. The classification should apply a label that restricts access and adds a header. Which two Microsoft Purview features must be configured? (Choose two.)

20 minute time limit — choose an answer to begin.

Accepted Answer

Sensitivity labels. Sensitivity labels are correct because they are the Microsoft Purview feature that applies classification markings (such as headers and footers) and encryption or access restrictions to documents. For this scenario, a sensitivity label must be configured to enforce the required header and access restrictions on content containing credit card numbers.

Answer

Retention labels

Answer

Data Loss Prevention (DLP) policies

Question 2

An organization uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. They want to create a policy that blocks users from pasting credit card numbers into web forms in Microsoft Edge. Which type of DLP policy should they configure?

Accepted Answer

Endpoint DLP. Endpoint DLP is correct because it monitors and controls activities on Windows 10/11 and macOS endpoints, including the ability to block pasting sensitive data like credit card numbers into web forms in Microsoft Edge. This policy extends DLP protection to unmanaged browsers and specific user actions, such as paste, clipboard, and print, which are not covered by cloud-based DLP policies.

Answer

Exchange DLP

Answer

SharePoint DLP

Answer

Teams DLP

Question 3

A compliance administrator wants to automatically apply a 'Confidential' sensitivity label to documents that contain tax identification numbers. Which two configurations are required? (Choose two.)

Accepted Answer

Define a sensitive information type for tax IDs. A sensitive information type (SIT) defines the pattern to detect tax identification numbers (e.g., using regex or keyword lists) in content. Option D is correct because an auto-labeling policy automatically applies the sensitivity label to documents when the SIT is matched, without requiring user intervention. Together, they enable automatic classification based on content inspection.

Answer

Create a sensitivity label with the desired protection settings

Answer

Configure a data loss prevention (DLP) rule

Question 4

A compliance administrator needs to preserve all documents in a SharePoint Online site that were created before a specific date for a legal hold. The hold should prevent any modification or deletion of those documents. What should the administrator configure?

Accepted Answer

eDiscovery hold. An eDiscovery hold (also known as a litigation hold) is the correct mechanism for legal holds. When placed on a SharePoint site, it preserves content by retaining the original versions in the Preservation Hold library if documents are edited or deleted. It does not prevent users from modifying current documents, but it ensures the original content is available for compliance. This preserves all documents created before a specific date.

Answer

Retention label applied automatically

Answer

Data loss prevention policy

Answer

Sensitivity label with encryption

Question 5

A compliance officer wants to automatically apply a 'Confidential' sensitivity label to documents in SharePoint Online that contain credit card numbers. The label should be applied when the documents are created or modified. Which Microsoft Purview feature should be configured?

Accepted Answer

Create an auto-labeling policy for sensitivity labels. Auto-labeling policies for sensitivity labels in Microsoft Purview can automatically apply a sensitivity label to documents in SharePoint Online based on sensitive information types, such as credit card numbers. This policy scans documents when they are created or modified and applies the label without user intervention, meeting the compliance officer's requirement.

Answer

Create a retention label policy

Answer

Create a Data Loss Prevention (DLP) policy

Answer

Configure a default sensitivity label

Question 6

A compliance officer wants to automatically apply a retention label to documents that contain SWIFT codes (financial identifiers) when uploaded to SharePoint Online. Which two Microsoft Purview features are required for this configuration? (Choose two.)

Accepted Answer

Trainable classifier. A trainable classifier is required to identify content containing SWIFT codes based on pattern recognition and machine learning. Option C is correct because an auto-apply retention label policy is the mechanism that automatically assigns the retention label to documents when the classifier detects SWIFT codes in SharePoint Online.

Answer

Sensitivity label

Answer

Data Loss Prevention (DLP) policy

Question 7

A compliance administrator needs to preserve all communications in a user's mailbox and OneDrive for an ongoing litigation. The user must continue working normally, but their data should not be altered or deleted. Which Microsoft Purview feature should be applied?

Accepted Answer

eDiscovery Hold. eDiscovery Hold is the correct feature for preserving all communications in both the user's mailbox and OneDrive. An eDiscovery hold can be placed on a user's entire mailbox and OneDrive site without a search query, preserving all content in its original state, including deleted and modified items, while allowing the user to continue working. Litigation Hold is an Exchange Online mailbox-only feature and does not apply to OneDrive. Retention policy preserves data but is typically for compliance, and DLP prevents data leakage, not preservation.

Answer

Litigation Hold

Answer

Retention policy

Answer

Data Loss Prevention (DLP) policy

Question 8

A compliance officer wants to automatically apply a 'Confidential' sensitivity label to documents in SharePoint Online that contain credit card numbers. Which two Microsoft Purview features must be configured together? (Choose two.)

Accepted Answer

Data Loss Prevention (DLP) policy. To automatically apply a 'Confidential' sensitivity label to documents containing credit card numbers in SharePoint Online, you must configure a sensitivity label with auto-labeling (client-side or service-side) to detect the sensitive content, and a Data Loss Prevention (DLP) policy to enforce the labeling action. The DLP policy can be set to automatically apply the sensitivity label when credit card patterns are matched, using the same sensitive info types as auto-labeling. Together, they ensure that content is both classified and protected at rest.

Answer

Retention label policy

Answer

Microsoft Purview Information Protection scanner

Question 9

A compliance officer needs to ensure that all emails containing payment card information (PCI) are automatically encrypted when sent to external recipients. The encryption should occur without user intervention. Which two features should be configured together? (Choose two.)

Accepted Answer

Data Loss Prevention (DLP) policy with encryption action. A compliance officer should configure a sensitivity label with encryption (option B) that defines the encryption settings, and a DLP policy (option A) that detects PCI data and automatically applies that sensitivity label. In the DLP policy, the action is to apply the sensitivity label, not a direct encryption action. The DLP rule uses built-in sensitive information types (e.g., Credit Card Number) to trigger the label application. The label then encrypts the message, satisfying the requirement without user intervention.

Answer

Microsoft Purview Message Encryption

Answer

Transport rule with encryption

Question 10

A compliance officer needs to ensure that all documents uploaded to SharePoint Online that contain passport numbers are automatically labeled with a 'Highly Confidential' sensitivity label. Which two Microsoft Purview features must be configured together to achieve this? (Choose two.)

Accepted Answer

Auto-labeling policy for SharePoint Online. An auto-labeling policy in Microsoft Purview can automatically apply a sensitivity label to documents containing sensitive information, such as passport numbers, when they are uploaded to SharePoint Online. This policy uses conditions based on sensitive info types to trigger the labeling action without user intervention.

Answer

Data Loss Prevention (DLP) policy

Answer

Retention label policy

Question 11

An organization is involved in litigation and needs to search for all communications containing a specific keyword across Exchange Online, SharePoint Online, and OneDrive for Business. The results must be preserved as evidence without allowing deletion. Which Microsoft Purview solution should the compliance officer use?

Accepted Answer

eDiscovery (Premium). eDiscovery (Premium) is the correct solution because it provides end-to-end workflow for identifying, preserving, collecting, reviewing, and exporting content across Exchange Online, SharePoint Online, and OneDrive for Business. It supports legal hold to preserve data in-place, preventing deletion or alteration, and can search all communications for specific keywords using advanced query capabilities.

Answer

Data Loss Prevention

Answer

Communication Compliance

Answer

Retention Labels

Question 12

An organization has a legal requirement to preserve certain contracts as immutable records. Once a contract is declared as a record, it must not be editable or deletable by users, including administrators. Which Microsoft Purview solution should be configured?

Accepted Answer

Records Management. Records Management in Microsoft Purview is designed to declare items as immutable records, locking them against editing or deletion by any user, including administrators. This satisfies the legal requirement for preserving contracts as unchangeable records by applying retention labels that enforce strict regulatory compliance.

Answer

Data Loss Prevention

Answer

eDiscovery (Premium)

Answer

Communication Compliance

Question 13

A compliance officer needs to automatically classify documents in SharePoint Online that contain credit card numbers. The classification should apply a label that restricts access and adds a header. Which two Microsoft Purview features must be configured? (Choose two.)

20 minute time limit — choose an answer to begin.

Accepted Answer

retention label configured with a retention action. To achieve this, you must configure both a retention label with the retention action (retain for 5 years, then delete) and an auto-apply retention label policy with a KQL query that matches the exact phrase 'Project Alpha'. The policy automatically assigns the label to documents containing that phrase.

Answer

sensitivity label configured with a retention marking

Answer

Data Loss Prevention (DLP) policy with a condition matching 'Project Alpha'

Question 14

A user is leaving the organization, and a litigation hold must be placed on their Exchange Online mailbox to preserve all existing and future data indefinitely. The user's mailbox will continue to be monitored for any attempts to delete data. Which Microsoft Purview feature should the compliance officer use?

Accepted Answer

Litigation Hold. Litigation Hold is the correct feature because it preserves all mailbox content, including future items, and prevents permanent deletion. It is the most direct mailbox-level hold for this scenario. Monitoring deletion attempts is done via mailbox auditing, not by the hold itself; however, the hold ensures data remains preserved even if deletion is attempted.

Answer

eDiscovery hold (Core or Advanced)

Answer

retention policy with 'Preserved forever' state

Answer

In-Place Hold (Exchange Online)

Question 15

A compliance officer needs to ensure that all emails sent to a specific distribution group are automatically retained for 3 years and then deleted. Which Microsoft Purview feature should be used?

Accepted Answer

A: Data Lifecycle Management (retention policy). Data Lifecycle Management (retention policies) in Microsoft Purview can be applied to Exchange Online mailboxes. For a distribution group, you can create a retention policy that applies to the mailboxes of the group's members. The policy can be configured to retain items for 3 years and then delete them using the 'Retain for 3 years, then delete' action. This ensures messages sent to the group are retained as part of the members' mailbox content.

Answer

B: Information Protection (sensitivity labels)

Answer

C: Data Loss Prevention (DLP policy)

Answer

D: eDiscovery (content search)

Question 16

A compliance officer needs to identify documents in SharePoint Online that contain confidential business information by using a machine learning model. Which Microsoft Purview solution should be configured?

Accepted Answer

B: Information Protection (trainable classifiers). Trainable classifiers in Microsoft Purview Information Protection use machine learning models to identify documents containing sensitive or confidential business information based on content patterns and context. Unlike simple keyword matching, trainable classifiers learn from sample documents to accurately detect specific types of confidential data, such as intellectual property or financial reports, in SharePoint Online.

Answer

A: Data Lifecycle Management

Answer

C: eDiscovery

Answer

D: Communication Compliance

Question 17

A compliance officer needs to automatically classify documents in SharePoint Online that contain credit card numbers. The classification should apply a label that restricts access and adds a header. Which two Microsoft Purview features must be configured? (Choose two.)

20 minute time limit — choose an answer to begin.

Accepted Answer

Sensitivity label. Sensitivity labels define the classification and protection settings (e.g., 'Confidential' marking and encryption). Auto-labeling policies automatically apply those labels to documents containing sensitive information types, such as credit card numbers, without requiring user intervention. Together, they enable automatic labeling based on sensitive content in SharePoint Online.

Answer

Data Loss Prevention (DLP) policy

Answer

Retention label policy

Question 18

A compliance officer needs to identify documents in SharePoint Online that contain credit card numbers. The officer wants a solution that can automatically detect and mark these documents for further review without applying any protection actions. Which Microsoft Purview solution should the officer use?

Accepted Answer

Microsoft Purview Information Protection sensitivity label auto-labeling. Microsoft Purview Information Protection sensitivity label auto-labeling can automatically detect sensitive information types such as credit card numbers in SharePoint Online and apply a sensitivity label to mark the document for review. The label can be configured with no protection actions (e.g., no encryption or access restrictions), satisfying the requirement of detection and marking without protection. DLP policies are more focused on preventing data loss via actions like blocking or alerting, and do not 'mark' documents.

Answer

Microsoft Purview Data Loss Prevention (DLP) policy

Answer

Microsoft Purview eDiscovery content search

Answer

Microsoft Purview Records Management retention label

Question 19

A compliance officer needs to automatically classify documents in SharePoint Online that contain credit card numbers. The classification should apply a label that restricts access and adds a header. Which two Microsoft Purview features must be configured? (Choose two.)

20 minute time limit — choose an answer to begin.

Accepted Answer

Sensitivity labels and auto-labeling policies. The requirement is to automatically apply a sensitivity label that encrypts documents containing credit card numbers, without manual user action. Sensitivity labels define the encryption and protection settings, while auto-labeling policies automatically apply those labels based on sensitive information types (e.g., credit card numbers). This combination meets the automation and encryption need. Option B is incorrect because retention labels do not provide encryption; they are designed for retention and deletion policies, not for protection. DLP policies can detect sensitive data but cannot directly apply retention labels with encryption; moreover, retention labels lack encryption capabilities. Therefore, only Option A correctly identifies the two required components.

Answer

Data loss prevention (DLP) policies and retention labels

Answer

Sensitivity labels and retention policies

Answer

Auto-labeling policies and communication compliance policies

Question 20

A compliance officer needs to prevent users from sending emails that contain social security numbers to external recipients. When a user attempts to send such an email from Outlook, the email should be blocked and a policy tip should be displayed explaining why the email was blocked. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Data Loss Prevention (DLP) policy. A Data Loss Prevention (DLP) policy in Microsoft Purview is designed to detect sensitive information, such as social security numbers, in emails and enforce actions like blocking the message and displaying a policy tip. This meets the compliance officer's requirement to prevent external sending of sensitive data while providing user notification.

Answer

Sensitivity labels

Answer

Communication compliance

Answer

eDiscovery