MS-102 Manage compliance by using Microsoft Purview Practice Question
A compliance officer needs to prevent users from sharing documents labeled 'Confidential' via email with external recipients. If a user attempts to send such an email, the action should be blocked and a policy tip displayed. Which Microsoft Purview feature should be configured?
⚠ Common exam trap
Microsoft often tests the misconception that sensitivity labels alone can enforce blocking actions, but in reality, sensitivity labels only apply classification and protection (e.g., encryption) and must be combined with a DLP policy to inspect and block outbound email based on those labels.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP) policy
A Data Loss Prevention (DLP) policy is the correct Microsoft Purview feature because it is specifically designed to inspect email content and attachments for sensitive information, such as documents labeled 'Confidential', and enforce actions like blocking the email and displaying a policy tip to the user. DLP policies can be configured with conditions that detect sensitivity labels and apply protective actions, including blocking external sharing and notifying users via policy tips.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Retention labels
Why it's wrong here
Retention labels are designed solely for lifecycle management—they apply retention and deletion rules to content, not access or sharing restrictions. They cannot inspect the recipient of an email or block a forward, so they have no mechanism to prevent users from sharing externally. In the compliance palette, retention labels complement DLP but never enforce sharing controls.
- ✓
Data Loss Prevention (DLP) policy
Why this is correct
DLP policies are the correct control because they inspect message content and context in transit and can match sensitive information types or sensitivity labels. With a rule, DLP can block or warn when email is shared with external users, and can even block the send action entirely while allowing an override with justification. This makes DLP the only option that directly enforces a sharing restriction based on content classification.
- ✗
Sensitivity labels
Why it's wrong here
Sensitivity labels classify and optionally encrypt content, but they are metadata and protection wrappers, not enforcement of sharing behavior on their own. While a DLP policy can leverage a sensitivity label as a condition, the label itself does not evaluate the email's recipients or block external sharing. Without a DLP rule, a sensitivity label merely marks or encrypts the item and lets the user share it wherever the encryption permits.
- ✗
Information barriers
Why it's wrong here
Information barriers segment communication between user groups based on their organizational relationships or roles, not on the content or label of an email. They prevent one defined group from initiating chats or email with another defined group, and cannot make per-message decisions about sharing with arbitrary external recipients. Thus, they are irrelevant to a scenario about stopping users from sharing labeled or sensitive content externally.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
External sharing
External sharing is the process of granting access to an organization's internal resources, such as documents or sites, to users who are not part of the organization's own identity system.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
This MS-102 question is part of Courseiva's 241-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.