MS-102 Manage compliance by using Microsoft Purview Practice Question
A compliance officer needs to prevent users from sharing protected health information (PHI) with external users in Microsoft Teams chat messages. When a user attempts to send a message containing a known PHI data type (e.g., medical record numbers), the message should be blocked and the sender should see a policy tip. Which Microsoft Purview solution should the officer configure?
⚠ Common exam trap
Candidates often confuse Communication compliance (which reviews sent messages) with DLP (which blocks messages in transit), leading them to select Option A despite the requirement for real-time blocking and policy tips.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP) policy for Teams
A Data Loss Prevention (DLP) policy for Microsoft Teams can be configured to detect and block sensitive information types, such as medical record numbers (a PHI data type), in chat messages. When a match occurs, the policy can block the message and display a policy tip to the sender, meeting the compliance officer's requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Communication compliance policy
Why it's wrong here
Communication compliance policies are designed for monitoring and reviewing messages to identify potential policy violations, such as harassment or inappropriate sharing of sensitive information. They use detection rules and machine learning to create alerts and support remediation workflows like case management, but they do not enforce real-time blocking at the moment a user hits send. Since the compliance officer needs to prevent sharing proactively, communication compliance alone is insufficient.
- ✓
Data Loss Prevention (DLP) policy for Teams
Why this is correct
A Data Loss Prevention (DLP) policy for Teams can enforce real-time protection on chat and channel messages by scanning content for sensitive information types, including protected health information (PHI). When a match is detected, the policy blocks the message and shows the sender a policy tip, with options to allow override based on policy configuration. This directly prevents users from sharing PHI, making it the appropriate solution.
- ✗
Sensitivity labels applied to Teams
Why it's wrong here
Sensitivity labels applied to Teams do not inspect message content in real time. A sensitivity label classifies and protects the entire container (team, group, or site) with settings such as privacy, guest access, and external sharing, but it does not scan individual chat or channel messages for sensitive data. Therefore, labels cannot block a message containing PHI; they only govern access and protection at the container level.
- ✗
Information barriers
Why it's wrong here
Information barriers are a policy mechanism to restrict communication and collaboration between specific user segments, typically to avoid conflicts of interest or compliance with regulatory requirements like insider trading rules. They define which groups can or cannot interact with each other, but they do not evaluate the content or detect sensitive data such as PHI. Thus, information barriers would not prevent a user from sharing PHI within an allowed communication pair.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
Courseiva writes every MS-102 question from scratch — 241 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.