MS-102 Manage compliance by using Microsoft Purview Practice Question
A compliance officer needs to monitor employee communications across Microsoft Teams and Outlook for potential insider trading, using predefined policies. The solution must detect keywords like 'insider tip' and 'stock' and allow designated reviewers to take action. Which Microsoft Purview solution should the officer use?
⚠ Common exam trap
Test-takers frequently confuse Communication Compliance with Data Loss Prevention because both involve policy-based detection, but DLP is about preventing data exfiltration, not monitoring for insider trading keywords with reviewer workflows.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Communication Compliance
Communication Compliance is the correct Microsoft Purview solution because it is specifically designed to detect sensitive keywords (e.g., 'insider tip' and 'stock') in Microsoft Teams chats, channel messages, and Outlook emails using predefined or customizable policies. It enables designated reviewers to investigate and take remediation actions such as removing messages or escalating for legal review, directly addressing the insider trading monitoring requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Communication Compliance
Why this is correct
Communication Compliance is a Microsoft Purview solution that provides proactive monitoring of user communications across email, Microsoft Teams, Yammer, and third-party sources. It uses customizable policies and machine learning-based trainable classifiers to detect potential regulatory violations—including insider trading, harassment, or conflicts of interest—and then routes alerts for investigation and remediation within the compliance portal. This makes it the correct tool for an ongoing, automated surveillance of employee communications rather than a reactive or archival mechanism.
- ✗
Data Loss Prevention
Why it's wrong here
Data Loss Prevention (DLP) is designed to protect sensitive data—such as credit card numbers, bank account details, or personal data—by inspecting content and applying protective actions like blocking transmission, encrypting files, or showing policy tips. While DLP policies can scan communications, their primary purpose is preventing accidental or unauthorized data exfiltration, not detecting behavioral indicators like insider trading language. DLP lacks the advanced language understanding and policy templates needed to proactively flag communication activities for regulatory compliance, so it would not serve as a communication monitoring solution.
- ✗
eDiscovery (Premium)
Why it's wrong here
eDiscovery (Premium) is a workload used for legal discovery processes, enabling organizations to preserve, collect, review, and produce content in response to litigation or regulatory investigations. It is inherently reactive: content is collected and managed after a legal hold is placed or a case is initiated, rather than being continuously scanned through proactive, policy-based alerting. Because it does not provide real-time monitoring of communications for potential violations like insider trading, it is unsuitable for ongoing compliance surveillance of employee messages.
- ✗
Records Management
Why it's wrong here
Records Management in Microsoft Purview focuses on the lifecycle of content by applying retention and disposition labels to satisfy legal, regulatory, and business requirements. It governs when records should be marked, retained, or deleted, but does not inspect the content of communications for suspicious or prohibited language. Unlike Communication Compliance, Records Management has no capability to detect behavioral patterns or alert administrators to potential policy violations, making it entirely irrelevant to proactive monitoring of employee communications.
Go deeper
Related to this question
Learn chapter
Regulatory Compliance in Microsoft Purview
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Communication Compliance
Communication Compliance is the set of policies, tools, and practices used by organizations to monitor, capture, and review electronic communications in order to meet regulatory, legal, and internal governance requirements.
About these practice questions
This MS-102 question is part of Courseiva's 712-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.