MS-102 Manage compliance by using Microsoft Purview Practice Question
A user in your organization receives a 'Message blocked' notification when trying to send an email with a credit card number. The DLP policy is configured to block such emails. The user claims the credit card number is a valid test number used for training. What should you do to allow the email while maintaining security?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a policy tip to allow override with a business justification.
Configuring a policy tip with override allows the user to justify the override with a business justification, which is audited. This maintains security by notifying the user and recording the override for compliance. Option B (excluding the user) removes DLP protection entirely for that user, which is insecure. Option C (disabling the policy) disables protection for all users. Option D (adding to super user group) bypasses all DLP checks for the user, which is too permissive.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a policy tip to allow override with a business justification.
Why this is correct
Configuring a DLP policy tip to allow an override with a business justification enables the user to send the blocked message while the event is recorded in the audit log and DLP reports. This preserves the policy for all other users and content, and provides a controlled, reviewable exception for legitimate business needs. Unlike broader changes, this is the intended mechanism to balance productivity with data protection.
- ✗
Exclude the user from the DLP policy.
Why it's wrong here
Excluding the user from the DLP policy removes them entirely from the policy's scope, so all future messages they send or receive skip every rule and content match, not just the current incident. This is a permanent scope change that leaves no audit trail for the override and exposes sensitive data on an ongoing basis. It also requires a manual administrative action to re-add the user later, making it an inappropriate one-time fix.
- ✗
Disable the DLP policy temporarily.
Why it's wrong here
Disabling the DLP policy temporarily stops all rule enforcement for every user and workload covered by the policy, not just for the affected user. During that window, any user can transmit sensitive content without policy tips, blocking, or audit logging, creating a broad data-exposure risk. This is a disproportionate response when a targeted, auditable override is available for the single blocked message.
- ✗
Add the user to the DLP policy's super user group.
Why it's wrong here
Microsoft Purview DLP does not recognize or provide a 'super user group' that can be used to bypass enforcement; roles like DLP Compliance Management only grant administrative policy permissions, not an exemption from matching rules. Even if such a group existed, adding the user would implicitly disable DLP checks for them and eliminate the audit trail, which is a less controlled and unsupported version of an exclusion. Elevated roles are not a substitute for a policy-tip override.
Go deeper
Related to this question
Learn chapter
Email Quarantine and Submission Management
Key term
DLP policy
A DLP policy is a set of rules that an organization uses to prevent sensitive data from being lost, stolen, or accidentally exposed, whether it is in use, in motion, or at rest.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
Courseiva writes every MS-102 question from scratch — 712 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.