- A
Create a sensitivity label with an auto-labeling policy that uses a custom sensitive info type, and configure the label's protection settings to require user justification to remove the label.
This allows automatic detection and application of the label, and the justification requirement prevents easy removal.
- B
Create a retention label and publish it to the site via auto-labeling policy.
Why wrong: Retention labels do not support automatic classification based on sensitive info types; they are for retention actions.
- C
Use a Data Loss Prevention (DLP) policy to apply the label and configure the policy to block removal.
Why wrong: DLP policies can apply labels but cannot enforce user justification for label removal; that is a label setting.
- D
Deploy the Azure Information Protection scanner to scan SharePoint Online documents.
Why wrong: Azure Information Protection scanner is designed for on-premises file shares and does not integrate with SharePoint Online auto-labeling.
Quick Answer
The correct answer is to create a sensitivity label with an auto-labeling policy that uses a custom sensitive info type, and configure the label’s protection settings to require user justification to remove the label. This works because Microsoft Purview auto-labeling policies can scan documents in SharePoint Online for patterns like employee IDs defined as custom sensitive information types, then automatically apply the label. The justification requirement is a separate setting within the label’s protection configuration, ensuring users cannot strip the label without providing a reason. On the MS-102 exam, this scenario tests your understanding that auto-labeling policies handle detection and application, while the label’s own settings control removal behavior. A common trap is confusing auto-labeling policies with manual label recommendations or forgetting that justification is a per-label protection setting, not part of the policy itself. Memory tip: think “policy applies, label protects”—the policy finds the data, the label locks down removal.
MS-102 Manage compliance by using Microsoft Purview Practice Question
This MS-102 practice question tests your understanding of manage compliance by using microsoft purview. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A compliance officer needs to automatically detect and apply a sensitivity label to documents in SharePoint Online that contain a custom sensitive information type (e.g., employee ID pattern). The label must be applied automatically, and users must be prompted to provide a justification when attempting to remove the label. Which combination of configurations should the officer implement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Create a sensitivity label with an auto-labeling policy that uses a custom sensitive info type, and configure the label's protection settings to require user justification to remove the label.
Option A is correct because Microsoft Purview sensitivity labels support auto-labeling policies that can automatically apply a label based on custom sensitive information types (e.g., employee ID patterns). Additionally, the label's protection settings include an option to require user justification when removing the label, which meets the compliance officer's requirement for both automatic detection and removal justification.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a sensitivity label with an auto-labeling policy that uses a custom sensitive info type, and configure the label's protection settings to require user justification to remove the label.
Why this is correct
This allows automatic detection and application of the label, and the justification requirement prevents easy removal.
Related concept
Read the scenario before looking for a memorised answer.
- ✗
Create a retention label and publish it to the site via auto-labeling policy.
Why it's wrong here
Retention labels do not support automatic classification based on sensitive info types; they are for retention actions.
- ✗
Use a Data Loss Prevention (DLP) policy to apply the label and configure the policy to block removal.
Why it's wrong here
DLP policies can apply labels but cannot enforce user justification for label removal; that is a label setting.
- ✗
Deploy the Azure Information Protection scanner to scan SharePoint Online documents.
Why it's wrong here
Azure Information Protection scanner is designed for on-premises file shares and does not integrate with SharePoint Online auto-labeling.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates confuse retention labels (which handle lifecycle) with sensitivity labels (which handle classification and protection), or they mistakenly think DLP policies can enforce label removal justification, which is a sensitivity label property, not a DLP rule action.
Detailed technical explanation
How to think about this question
Auto-labeling policies in Microsoft Purview use the same sensitive information types (SITs) as DLP, but they are evaluated asynchronously via a background process that scans existing and new documents. The 'require justification to remove' setting is part of the label's protection configuration and is enforced client-side by the AIP unified labeling client or built-in Office sensitivity labeling, which triggers a justification prompt in the Office apps when a user attempts to remove or downgrade the label.
KKey Concepts to Remember
- Read the scenario before looking for a memorised answer.
- Find the constraint that changes the correct option.
- Eliminate answers that are true in general but not in this case.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A cloud solutions architect for a retail company is evaluating services for a new workload. The correct answer here reflects best practice for the specific scenario described — not a general cloud recommendation. Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option. Cloud exam questions reward reading the constraint carefully: the same technology can be right or wrong depending on the use case.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
- →
Manage compliance by using Microsoft Purview — study guide chapter
Learn the concepts, then practise the questions
- →
Manage compliance by using Microsoft Purview practice questions
Targeted practice on this topic area only
- →
All MS-102 questions
975 questions across all exam domains
- →
Microsoft 365 Administrator MS-102 study guide
Full concept coverage aligned to exam objectives
- →
MS-102 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related MS-102 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Deploy and manage a Microsoft 365 tenant practice questions
Practise MS-102 questions linked to Deploy and manage a Microsoft 365 tenant.
Implement and manage Microsoft Entra identity and access practice questions
Practise MS-102 questions linked to Implement and manage Microsoft Entra identity and access.
Manage security and threats by using Microsoft Defender XDR practice questions
Practise MS-102 questions linked to Manage security and threats by using Microsoft Defender XDR.
Manage compliance by using Microsoft Purview practice questions
Practise MS-102 questions linked to Manage compliance by using Microsoft Purview.
Manage users, groups, licensing, and support practice questions
Practise MS-102 questions linked to Manage users, groups, licensing, and support.
Implement and manage identity and access in Microsoft Entra ID practice questions
Practise MS-102 questions linked to Implement and manage identity and access in Microsoft Entra ID.
MS-102 fundamentals practice questions
Practise MS-102 questions linked to MS-102 fundamentals.
MS-102 scenario practice questions
Practise MS-102 questions linked to MS-102 scenario.
MS-102 troubleshooting practice questions
Practise MS-102 questions linked to MS-102 troubleshooting.
Practice this exam
Start a free MS-102 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this MS-102 question test?
Manage compliance by using Microsoft Purview — This question tests Manage compliance by using Microsoft Purview — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Create a sensitivity label with an auto-labeling policy that uses a custom sensitive info type, and configure the label's protection settings to require user justification to remove the label. — Option A is correct because Microsoft Purview sensitivity labels support auto-labeling policies that can automatically apply a label based on custom sensitive information types (e.g., employee ID patterns). Additionally, the label's protection settings include an option to require user justification when removing the label, which meets the compliance officer's requirement for both automatic detection and removal justification.
What should I do if I get this MS-102 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
6 more ways this is tested on MS-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A compliance officer needs to automatically detect and apply a sensitivity label to documents in SharePoint Online that contain personally identifiable information (PII) such as social security numbers. The label should be applied automatically, and users must be able to override the label with a justification. Which two Microsoft Purview components must be configured to achieve this?
medium- ✓ A.sensitive info type (SIT) and an auto-labeling policy
- ✓ B.sensitivity label with auto-labeling for SharePoint and a policy tip
- C.data loss prevention (DLP) policy and a retention label
- D.default sensitivity label and a compliance tag
Why A: Option A is correct because auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels to documents in SharePoint Online based on sensitive info types (SITs), such as social security numbers. The auto-labeling policy supports user override with justification when configured with the 'Mandatory labeling with justification' setting, meeting the compliance officer's requirements.
Variation 2. A compliance officer needs to automatically apply a sensitivity label to all documents in SharePoint Online that contain a credit card number. The label must mark the document as 'Confidential' and encrypt it. Which two Microsoft Purview components must be configured to achieve automatic labeling based on sensitive content? (Choose two.)
hard- ✓ A.Sensitivity label
- ✓ B.Auto-labeling policy
- C.Data Loss Prevention (DLP) policy
- D.Retention label policy
Why A: Sensitivity labels define the classification and protection settings (e.g., 'Confidential' marking and encryption). Auto-labeling policies automatically apply those labels to documents containing sensitive information types, such as credit card numbers, without requiring user intervention. Together, they enable automatic labeling based on sensitive content in SharePoint Online.
Variation 3. A compliance officer needs to automatically apply a sensitivity label that encrypts documents in SharePoint Online when the documents contain a custom regex pattern (e.g., employee ID). The labeling must occur automatically without requiring user interaction. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both components.)
medium- ✓ A.An auto-labeling policy and a sensitivity label with encryption configured
- B.Data Loss Prevention (DLP) policy and a sensitivity label
- C.retention label and an auto-labeling policy
- ✓ D.sensitive info type and a sensitivity label
Why A: Option A is correct because an auto-labeling policy in Microsoft Purview can automatically apply sensitivity labels to documents in SharePoint Online based on conditions such as the presence of a custom regex pattern. The sensitivity label must have encryption configured to enforce protection, and the auto-labeling policy triggers the labeling without user interaction.
Variation 4. A compliance officer needs to automatically apply a sensitivity label that encrypts documents in SharePoint Online when they contain credit card numbers. The solution must not require manual user action. Which two Microsoft Purview components must be configured? (Select the option that correctly identifies both required components.)
medium- ✓ A.Sensitivity labels and auto-labeling policies
- ✓ B.Data loss prevention (DLP) policies and retention labels
- C.Sensitivity labels and retention policies
- D.Auto-labeling policies and communication compliance policies
Why A: Option A is correct because sensitivity labels define the encryption and protection settings for content, while auto-labeling policies automatically apply those labels to documents in SharePoint Online when they match sensitive information types like credit card numbers, without requiring manual user action. Together, they enable automated, policy-based classification and protection based on content inspection.
Variation 5. A compliance officer needs to automatically apply a sensitivity label named 'Confidential' to documents stored in SharePoint Online whenever the documents contain social security numbers. Users must be prevented from removing the label. Which configuration should the officer implement?
medium- A.Create a retention label with auto-labeling based on sensitive info types
- ✓ B.Create a sensitivity label with auto-labeling and set 'Mark content as mandatory'
- C.Use Microsoft Information Protection (MIP) unified labeling client to apply labels
- D.Configure Data Loss Prevention (DLP) policy to apply the label
Why B: Option B is correct because sensitivity labels support auto-labeling based on sensitive info types (e.g., social security numbers) and the 'Mark content as mandatory' setting prevents users from removing the label. This ensures automatic classification and enforced protection, meeting the compliance officer's requirements.
Variation 6. A compliance officer needs to automatically encrypt and apply a 'Do Not Forward' restriction to all outgoing emails sent by the finance department that contain credit card numbers. The solution must work without requiring users to manually apply labels. Which configuration is required?
hard- A.Create a Data Loss Prevention (DLP) policy with the action 'Encrypt email messages'
- ✓ B.Create an auto-labeling policy for Microsoft Purview Sensitivity Labels that applies a label with encryption and 'Do Not Forward' configured, scoped to the finance department
- C.Create a mail flow rule in Exchange Online to apply Rights Management template 'Do Not Forward'
- D.Create a retention label that encrypts the email
Why B: Option B is correct because Microsoft Purview auto-labeling policies can automatically apply a sensitivity label that includes encryption and a 'Do Not Forward' restriction based on conditions such as sensitive information types (e.g., credit card numbers) and user scope (e.g., finance department). This meets the requirement of automatic enforcement without user intervention, as the label is applied at the time of sending via client-side auto-labeling.
Last reviewed: Jun 11, 2026
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.