hardMultiple Choice
MS-102 Practice Question: A user with an E5 license is unable to use Azure…
A user with an E5 license is unable to use Azure Information Protection (AIP). The admin confirms the license is assigned. What is the most likely cause?
⚠ Common exam trap
A common mix-up: candidates assume an E5 license automatically grants full access to all included features, but Microsoft requires each service plan to be individually enabled, and the exam tests this granular licensing behavior.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AIP service plan is disabled in the license
Even with an E5 license assigned, the Azure Information Protection (AIP) service plan must be explicitly enabled for the user. By default, some service plans within an E5 license may be disabled, and the AIP service plan (commonly labeled as 'Azure Information Protection' or 'Information Protection for Office 365') must be toggled on in the user's license settings in the Microsoft 365 admin center. Without this, the user cannot activate AIP features regardless of license assignment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AIP requires an additional subscription
Why it's wrong here
Azure Information Protection (AIP), now integrated into Microsoft Purview Information Protection, is included in Microsoft 365 E5 as a service plan, along with Azure Rights Management (Azure RMS). No additional subscription is required for core labeling and protection capabilities. Because the licensing is already present in E5, a missing or extra subscription cannot be the cause of the user's inability to use AIP.
- ✗
AIP client is not installed
Why it's wrong here
The legacy Azure Information Protection client is not required for all AIP functionality. Modern labeling and protection are built directly into Microsoft 365 web apps and Office desktop apps, such as Word, Outlook, and SharePoint Online, using the built-in sensitivity labeling engine. The legacy client is only necessary for on-premises file scanners or older Office versions, so its absence would not prevent a user from using web-based or integrated AIP features.
- ✓
AIP service plan is disabled in the license
Why this is correct
The most likely cause is that the 'Azure Information Protection' service plan is disabled in the user's license assignment. In Microsoft 365, an administrator can toggle individual service plans on or off within a license while keeping the overall license assigned; disabling this plan blocks all AIP-related functionality without affecting other services. To confirm, check the user's license details in Microsoft 365 admin center under Users > Active Users > Licenses, or use PowerShell with Get-MgUserLicenseDetail to inspect the service plan status.
- ✗
User account is blocked
Why it's wrong here
If the user account itself were blocked, sign-in would fail across all Microsoft 365 services, including Exchange Online, Teams, and SharePoint, not just AIP. The problem is isolated to AIP, which indicates the account is active and authenticated. A blocked account would produce a different, broader set of failures, so this option does not align with the reported symptom.
Go deeper
Related to this question
Learn chapter
Sensitivity Labels: Admin Configuration
Key term
Office 365
Office 365 is a cloud-based subscription service from Microsoft that provides access to productivity applications like Word, Excel, and Outlook, along with other cloud services, for a monthly or annual fee.
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
About these practice questions
Courseiva writes every MS-102 question from scratch — 712 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.