MS-102 Manage compliance by using Microsoft Purview Practice Question
You need to ensure that all documents in a SharePoint Online site are automatically labeled with a 'Confidential' sensitivity label. Which Microsoft Purview feature should you use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview auto-labeling policy
Auto-labeling policies can automatically apply sensitivity labels to documents in SharePoint Online based on conditions. Option B is wrong because Data Loss Prevention policies detect and protect sensitive data but do not apply labels. Option C is wrong because retention policies manage data retention and deletion, not sensitivity labels. Option D is wrong because manual labeling requires user action, not automatic application.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Purview auto-labeling policy
Why this is correct
Microsoft Purview auto-labeling policies apply sensitivity labels automatically to items matching specified conditions, such as documents in a SharePoint Online site, without user intervention. That satisfies the stem's requirement that all documents be labelled Confidential automatically rather than through manual or default labelling.
- ✗
Microsoft Purview Data Loss Prevention policy
Why it's wrong here
A DLP policy detects and blocks sensitive content in motion or at rest, but it does not stamp a 'Confidential' sensitivity label onto documents. It is tempting because DLP and labelling both protect SharePoint content, yet DLP would be correct when the requirement is preventing sharing or exfiltration rather than classification.
- ✗
Microsoft Purview retention policy
Why it's wrong here
A retention policy governs how long content is kept, deleted or preserved; it never applies a sensitivity label. It is tempting because both features are configured at site level in Microsoft Purview, but retention would be correct where the requirement is meeting a records or data-lifecycle obligation rather than classification.
- ✗
Microsoft Purview manual labeling
Why it's wrong here
Manual labelling requires users to apply labels themselves, so nothing is automatic across the site. It is tempting because it is the fallback for ad-hoc classification of individual files, and would be right where a small set of documents needs one-off labelling rather than site-wide enforcement.
Go deeper
Related to this question
Learn chapter
Retention Labels and Policies
Key term
SharePoint Online
SharePoint Online is a cloud-based collaboration platform from Microsoft that lets teams create, store, organize, and share content securely from anywhere.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
One of 712 original MS-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on MS-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO Microsoft Purview solutions are primarily used for data classification?
easy- A.Data Loss Prevention
- ✓ B.Auto-labeling
- C.Communication Compliance
- D.Data Lifecycle Management
- ✓ E.Sensitivity labels
Why B: Auto-labeling (B) is correct because it is a Microsoft Purview Information Protection capability that automatically applies sensitivity labels to content by scanning it for sensitive information types, trainable classifiers, or exact data match, which is a core data-classification function. Sensitivity labels (E) are also correct because they are the primary mechanism in Microsoft Purview for manually classifying and protecting content by tagging it with a classification (for example, Confidential or Highly Confidential) that can enforce encryption and other protections. Together, sensitivity labels and auto-labeling form the classification backbone of Microsoft Purview Information Protection. Data Loss Prevention (A) is not primarily a classification tool; it uses classification results to detect and block risky sharing of sensitive data. Communication Compliance (C) focuses on detecting policy violations in communications such as harassment or inappropriate content, not on classifying data. Data Lifecycle Management (D) governs retention and deletion of content rather than classifying it.
Variation 2. Your company is implementing Microsoft Purview Information Protection to classify and protect sensitive documents. You need to ensure that all documents containing personally identifiable information (PII) are automatically labeled. Which TWO actions should you take? (Select TWO.)
medium- ✓ A.Define a custom sensitive info type in Microsoft Purview that matches your organization's PII patterns.
- B.Train users to manually apply a sensitivity label to documents containing PII.
- C.Configure a sensitivity label to encrypt documents containing PII.
- D.Create a retention label for documents containing PII.
- ✓ E.Create an auto-labeling policy in Microsoft Purview that applies a sensitivity label to documents containing PII.
Why A: Option A is correct because defining a custom sensitive information type in Microsoft Purview lets you match your organization's specific PII patterns (for example, using regular expressions, keywords, and confidence levels) so that the classification engine can reliably detect the PII unique to your environment. Option E is correct because an auto-labeling policy in Microsoft Purview is the mechanism that automatically applies a sensitivity label to documents that match sensitive information types, which is exactly what is required to label PII-containing documents without user intervention. Option B is incorrect because training users to apply labels manually does not provide the automatic labeling the scenario requires. Option C is incorrect because configuring a sensitivity label to encrypt documents only defines the protection action of a label; by itself it does not automatically detect or label PII content. Option D is incorrect because a retention label governs how long content is kept or deleted, not how it is classified and protected for PII.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.