Configuring Sensitivity Label Settings for Automatic Footer and Encryption
Your organization uses Microsoft Purview Information Protection. You need to ensure that when users manually apply a 'Confidential' label to a document in Word, the document is automatically marked with a footer 'CONFIDENTIAL' and encrypted. What must you configure?
Quick Answer
The correct answer is to configure the sensitivity label’s settings to include the footer and encryption. This is because sensitivity labels in Microsoft Purview Information Protection are the native objects that carry both content marking actions, such as a footer reading “CONFIDENTIAL,” and protection actions like encryption. When a user manually applies the label in Word, the label’s own configuration dictates that the footer is stamped and the document is encrypted automatically. On the MS-102 exam, this question tests your understanding of the separation between label configuration and label policy deployment; a common trap is confusing the label’s internal settings with the policy that publishes it, or mixing in DLP or auto-labeling rules which do not handle manual application. Remember the memory tip: “Label defines the action, policy defines the audience.” This distinction is critical for passing the exam and for real-world administration.
⚠ Common exam trap
MS-102 often tests the confusion between label policies (which control label availability and default/mandatory settings) and label settings (which define the actual protection and marking) — candidates pick the policy option thinking it configures the footer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the sensitivity label's settings to include the footer and encryption.
Sensitivity labels in Microsoft Purview Information Protection can be configured with content marking (headers, footers, watermarks) and encryption settings directly in the label definition. When a user manually applies the 'Confidential' label in Word, the label's configured footer and encryption are applied automatically to the document. This is the core behavior of sensitivity labels — the label itself carries the protection settings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Modify the sensitivity label policy to include the footer.
Why it's wrong here
Label policies control which users and groups can see and apply labels, not the label's visual markings or encryption. Those are defined in the sensitivity label's own configuration. It is tempting because policy scope must exist for users to apply the label at all, but it cannot add a footer.
- ✗
Create a DLP rule that applies the footer and encryption.
Why it's wrong here
DLP rules detect sensitive content and can block or warn, but they do not apply sensitivity label markings or encryption to documents. It is tempting because DLP and labels both address sensitive data, yet only label configuration embeds the footer and encryption at labelling time.
- ✗
Set up auto-labeling to apply the footer and encryption.
Why it's wrong here
Auto-labelling applies labels automatically by inspecting content, whereas the scenario requires the footer and encryption to follow a label the user applies manually. It is tempting because auto-labelling does configure marking and encryption, but only for service-side, condition-triggered application rather than manual user action.
- ✓
Configure the sensitivity label's settings to include the footer and encryption.
Why this is correct
Configuring the sensitivity label itself with footer and encryption settings satisfies the manual-labelling requirement. Label-scoped content marking and encryption apply automatically when a user selects 'Confidential' in Word, with no separate policy or client configuration needed. Microsoft Purview Information Protection enforces both directly at label application.
Go deeper
Related to this question
Learn chapter
Tenant-Wide Settings and Org Profile
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
About these practice questions
One of 712 original MS-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Your organization uses Microsoft Purview Information Protection with sensitivity labels. Users complain that when they apply the 'Confidential' label to a document, the footer and header are not applied automatically. The label is configured to have a footer reading 'Confidential' and a header reading 'Sensitive'. What is the most likely cause?
hard- A.The label is configured with encryption, which prevents markings.
- B.The label is not published to the users.
- C.The sensitivity bar is disabled in the applications.
- ✓ D.The Microsoft 365 Apps for enterprise client is not configured to apply markings.
Why D: For sensitivity labels to apply visual markings (headers/footers) in Office apps, the client must support and be configured to apply them. Microsoft 365 Apps for enterprise (formerly Office 365 ProPlus) supports automatic labeling and markings, but older or misconfigured clients may not apply them. The most likely cause is that the client is not configured to apply markings, such as when the 'Enable Azure Information Protection' setting is disabled or the client version is outdated.
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.