MS-102 Manage compliance by using Microsoft Purview Practice Question
Which TWO Microsoft Purview solutions are primarily used for data classification?
⚠ Common exam trap
MS-102 often tests the distinction between classification and protection solutions, causing candidates to confuse DLP (which enforces) with auto-labeling (which classifies).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Auto-labeling
Auto-labeling (B) is correct because it is a Microsoft Purview Information Protection capability that automatically applies sensitivity labels to content by scanning it for sensitive information types, trainable classifiers, or exact data match, which is a core data-classification function. Sensitivity labels (E) are also correct because they are the primary mechanism in Microsoft Purview for manually classifying and protecting content by tagging it with a classification (for example, Confidential or Highly Confidential) that can enforce encryption and other protections. Together, sensitivity labels and auto-labeling form the classification backbone of Microsoft Purview Information Protection. Data Loss Prevention (A) is not primarily a classification tool; it uses classification results to detect and block risky sharing of sensitive data. Communication Compliance (C) focuses on detecting policy violations in communications such as harassment or inappropriate content, not on classifying data. Data Lifecycle Management (D) governs retention and deletion of content rather than classifying it.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data Loss Prevention
Why it's wrong here
Data Loss Prevention is not primarily used for classification; it consumes classification results to enforce protective actions. DLP policies scan content for sensitive info types or labels and then apply rules such as blocking, encrypting, or warning users. Its core role is enforcement of security policies after data has already been classified, not the act of labeling or classifying data itself.
- ✓
Auto-labeling
Why this is correct
Auto-labeling is a primary Purview solution used to classify data by automatically applying sensitivity labels to content. It evaluates files, emails, and other content against sensitive info types, patterns, and conditions, then assigns the appropriate label without manual intervention. This enables consistent, bulk classification across hybrid environments, and it can run in client-side or service-side (server-side) modes to label content before or after it is stored.
- ✗
Communication Compliance
Why it's wrong here
Communication Compliance is designed to detect and address policy violations in organizational communications, such as harassment, offensive language, or inappropriate sharing of sensitive information. It analyzes messages from platforms like Teams, email, and Yammer using classifiers, and then routes findings for investigation or remediation. It does not classify data or apply labels; its focus is on insider risk behavior rather than information protection labeling.
- ✗
Data Lifecycle Management
Why it's wrong here
Data Lifecycle Management governs the retention, deletion, and archival of data based on regulatory, business, or legal requirements. While classification tags like retention labels are foundational, DLM's primary function is to manage how long content is kept, not to determine its sensitivity or protect it. It is distinct from sensitivity-based classification, as retention labels and policies do not enforce encryption or access controls.
- ✓
Sensitivity labels
Why this is correct
Sensitivity labels are the core classification mechanism in Microsoft Purview, letting users and administrators tag data with a label that conveys its sensitivity and defines protective settings. Labels can be applied manually or automatically, and they persist through copying, export, and sharing, driving encryption, access restrictions, and visual markings. They are the foundation of a holistic information protection strategy, enabling downstream solutions like DLP and auto-labeling to operate.
Go deeper
Related to this question
Learn chapter
Co-Management: Intune and Configuration Manager
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
One of 712 original MS-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.