Courseiva

MS-102 Auto-labeling Policy Practice Question

A compliance officer needs to automatically apply a 'Highly Confidential' sensitivity label to any email in Exchange Online that contains social security numbers. The labeling must happen automatically without user interaction. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both required components.)

⚠ Common exam trap

The trap is that candidates may incorrectly believe DLP policies can automatically apply sensitivity labels. In reality, DLP policies do not support this action; automatic labeling requires an auto-labeling policy or a retention label policy with auto-labeling, but for sensitivity labels, it must be an auto-labeling policy.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

sensitivity label and an auto-labeling policy

To automatically apply a 'Highly Confidential' sensitivity label to emails containing social security numbers in Exchange Online, you must configure a sensitivity label (which defines the label and its protection settings) and an auto-labeling policy (which scans Exchange Online for the sensitive info type and applies the label automatically without user interaction). Data Loss Prevention (DLP) policies can detect sensitive information and take actions such as blocking or alerting, but they cannot directly apply sensitivity labels. Therefore, only option C correctly identifies both required components.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    sensitivity label with auto-labeling rule and a Data Loss Prevention policy

    Why it's wrong here

    Incorrect. While a sensitivity label with an auto-labeling rule is required, a Data Loss Prevention (DLP) policy does not automatically apply sensitivity labels; it performs actions like blocking or alerting. Thus, this combination is not sufficient for automatic labeling.

  • ✗

    retention label and a Communication Compliance policy

    Why it's wrong here

    Incorrect. Retention labels are for data retention and deletion, not sensitivity labels. Communication Compliance policies monitor communications for policy violations but do not apply labels automatically.

  • ✓

    sensitivity label and an auto-labeling policy

    Why this is correct

    Correct. A sensitivity label with an auto-labeling rule defines what to label and when, and an auto-labeling policy triggers the automatic application without user interaction. This pair fulfills the requirement.

  • ✗

    unified labeling client and a custom sensitive info type

    Why it's wrong here

    Incorrect. The unified labeling client is used for manual labeling or in some legacy scenarios, but it does not enable automatic labeling. A custom sensitive info type is a component, but without an auto-labeling policy, automatic application cannot occur.

About these practice questions

One of 712 original MS-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.