MS-102 Manage compliance by using Microsoft Purview Practice Question
A compliance officer needs to prevent users from accidentally sharing documents containing credit card numbers with external users via email. The block should occur at the time the user attempts to send the email. Which Microsoft Purview feature should be configured?
⚠ Common exam trap
Many candidates confuse Communication compliance (which also monitors email) with DLP, but Communication compliance is a reactive auditing tool for policy violations, not a proactive, inline blocking mechanism for sensitive data.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP)
Data Loss Prevention (DLP) is the correct feature because it is specifically designed to inspect email content in transit for sensitive data patterns, such as credit card numbers, and enforce policy actions like blocking the message at the transport layer. In Microsoft Purview, DLP policies can be configured to scan Exchange Online messages in real time using sensitive information types (e.g., Credit Card Number) and apply a block action with an optional policy tip to the user before the email leaves the outbound queue.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Communication compliance
Why it's wrong here
Communication compliance is a supervision solution that uses built-in machine-learning classifiers to detect potentially problematic messages such as harassment, threats, or inappropriate sharing, but its primary function is to generate alerts and route content to reviewers for investigation. It does not intercept outbound email at the transport layer and therefore cannot prevent a message from being sent. While it can identify violations after the fact, it lacks the inline enforcement capability that DLP policies provide.
- ✓
Data Loss Prevention (DLP)
Why this is correct
Data Loss Prevention (DLP) policies in Microsoft 365 enforce real-time protection by inspecting email messages for sensitive info types (e.g., credit card numbers, Social Security numbers) and applying actions such as blocking the message from leaving the organization, with optional user override and notification. These policies are integrated with Exchange Online transport rules, allowing them to evaluate outbound mail before delivery. DLP is the correct choice because it directly addresses the requirement to prevent accidental sharing through proactive, policy-based blocking.
- ✗
Records management
Why it's wrong here
Records management is centered on the lifecycle of content—declaring records, applying retention labels, and managing disposition after a specific period. It does not perform content inspection for sensitive data at the moment of sending, nor does it enforce any send-time constraints on email messages. Its purpose is to ensure compliance with legal and regulatory retention requirements, not to stop data leakage or block risky communications.
- ✗
Insider risk management
Why it's wrong here
Insider risk management analyzes a wide array of behavioral signals and DLP alerts to score users and detect suspicious patterns like exfiltration of data. However, it is a investigative and response tool, not a real-time enforcement point: it does not directly inspect or block an outbound email as it is being composed or submitted. Although it can trigger DLP policies for remediation, its native functionality is to provide insight, alerts, and case management for security teams rather than to prevent accidental sharing.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
One of 241 original MS-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.