MS-102 Manage compliance by using Microsoft Purview Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Data Loss Prevention

  Why it's wrong here

  Data Loss Prevention is not primarily used for classification; it consumes classification results to enforce protective actions. DLP policies scan content for sensitive info types or labels and then apply rules such as blocking, encrypting, or warning users. Its core role is enforcement of security policies after data has already been classified, not the act of labeling or classifying data itself.

• ✓

  Auto-labeling

  Why this is correct

  Auto-labeling is a primary Purview solution used to classify data by automatically applying sensitivity labels to content. It evaluates files, emails, and other content against sensitive info types, patterns, and conditions, then assigns the appropriate label without manual intervention. This enables consistent, bulk classification across hybrid environments, and it can run in client-side or service-side (server-side) modes to label content before or after it is stored.

• ✗

  Communication Compliance

  Why it's wrong here

  Communication Compliance is designed to detect and address policy violations in organizational communications, such as harassment, offensive language, or inappropriate sharing of sensitive information. It analyzes messages from platforms like Teams, email, and Yammer using classifiers, and then routes findings for investigation or remediation. It does not classify data or apply labels; its focus is on insider risk behavior rather than information protection labeling.

• ✗

  Data Lifecycle Management

  Why it's wrong here

  Data Lifecycle Management governs the retention, deletion, and archival of data based on regulatory, business, or legal requirements. While classification tags like retention labels are foundational, DLM's primary function is to manage how long content is kept, not to determine its sensitivity or protect it. It is distinct from sensitivity-based classification, as retention labels and policies do not enforce encryption or access controls.

• ✓

  Sensitivity labels

  Why this is correct

  Sensitivity labels are the core classification mechanism in Microsoft Purview, letting users and administrators tag data with a label that conveys its sensitivity and defines protective settings. Labels can be applied manually or automatically, and they persist through copying, export, and sharing, driving encryption, access restrictions, and visual markings. They are the foundation of a holistic information protection strategy, enabling downstream solutions like DLP and auto-labeling to operate.

Go deeper

Related to this question