Block Emails with Credit Card Numbers Using DLP Policy Tip
A compliance officer needs to block users from sharing emails that contain credit card numbers with external recipients. When a user attempts to send such an email, it should be blocked immediately, and a policy tip should notify the user. Which Microsoft Purview solution should the officer configure?
Quick Answer
The correct answer is Data Loss Prevention (DLP) policy. This Microsoft Purview solution is specifically designed to detect sensitive information types, such as credit card numbers, using predefined rule patterns that validate against the Luhn algorithm, and can enforce immediate actions like blocking the email while displaying a policy tip to the sender. On the MS-102 exam, this scenario tests your understanding of how DLP policies apply to data in transit—a common trap is confusing DLP with Microsoft Defender for Office 365 or sensitivity labels, which handle threat protection and classification, not real-time blocking with user notification. Remember that when you need to block emails with credit card numbers and show a policy tip, you are configuring a DLP rule with an action set to "Block" and a notification tip enabled. A useful memory tip: DLP = Detect, Lock, and Prompt—it finds the sensitive data, locks the send action, and prompts the user with a tip.
⚠ Common exam trap
Many exam-takers confuse the real-time blocking and notification capability of DLP with sensitivity labels (which only apply protection after classification) or communication compliance (which is a review-based solution, not a real-time enforcement mechanism).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP) policy.
A Data Loss Prevention (DLP) policy is the correct solution because it is specifically designed to detect sensitive information types (e.g., credit card numbers via predefined rule patterns matching the Luhn algorithm) in transit and enforce actions such as blocking the email and displaying a policy tip to the sender. This meets the compliance officer's requirement to block external sharing of credit card data immediately with user notification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data Loss Prevention (DLP) policy.
Why this is correct
DLP policies can detect credit card numbers in Exchange Online emails and block them with user notifications via policy tips.
- ✗
Sensitivity label with encryption.
Why it's wrong here
Sensitivity labels can encrypt messages but do not block sending based on content; they require manual or automatic labeling, not real-time blocking.
- ✗
Microsoft Defender for Office 365 Safe Attachments policy.
Why it's wrong here
Safe Attachments scans attachments for malware, not sensitive content like credit card numbers.
- ✗
Communication compliance policy.
Why it's wrong here
Communication compliance monitors communications for policy violations (e.g., harassment) but does not block emails in real time based on sensitive data.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
This MS-102 question is part of Courseiva's 241-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A user in your organization receives a 'Message blocked' notification when trying to send an email with a credit card number. The DLP policy is configured to block such emails. The user claims the credit card number is a valid test number used for training. What should you do to allow the email while maintaining security?
easy- ✓ A.Configure a policy tip to allow override with a business justification.
- B.Exclude the user from the DLP policy.
- C.Disable the DLP policy temporarily.
- D.Add the user to the DLP policy's super user group.
Why A: Configuring a policy tip with override allows the user to justify the override with a business justification, which is audited. This maintains security by notifying the user and recording the override for compliance. Option B (excluding the user) removes DLP protection entirely for that user, which is insecure. Option C (disabling the policy) disables protection for all users. Option D (adding to super user group) bypasses all DLP checks for the user, which is too permissive.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.