MS-102 Manage compliance by using Microsoft Purview Practice Question
Your company is implementing Microsoft Purview Information Protection to classify and protect sensitive documents. You need to ensure that all documents containing personally identifiable information (PII) are automatically labeled. Which TWO actions should you take? (Select TWO.)
⚠ Common exam trap
MS-102 often tests the pairing of a sensitive info type with an auto-labeling policy — candidates pick encryption or retention labels thinking those achieve automatic classification, but only auto-labeling policies apply sensitivity labels based on content detection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Define a custom sensitive info type in Microsoft Purview that matches your organization's PII patterns.
Option A is correct because defining a custom sensitive information type in Microsoft Purview lets you match your organization's specific PII patterns (for example, using regular expressions, keywords, and confidence levels) so that the classification engine can reliably detect the PII unique to your environment. Option E is correct because an auto-labeling policy in Microsoft Purview is the mechanism that automatically applies a sensitivity label to documents that match sensitive information types, which is exactly what is required to label PII-containing documents without user intervention. Option B is incorrect because training users to apply labels manually does not provide the automatic labeling the scenario requires. Option C is incorrect because configuring a sensitivity label to encrypt documents only defines the protection action of a label; by itself it does not automatically detect or label PII content. Option D is incorrect because a retention label governs how long content is kept or deleted, not how it is classified and protected for PII.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Define a custom sensitive info type in Microsoft Purview that matches your organization's PII patterns.
Why this is correct
A custom sensitive info type defines the regex, keyword list and confidence level matching your organisation's specific PII formats, which built-in types may miss. Auto-labeling policies then reference this type, satisfying the requirement that all PII-containing documents are detected accurately.
- ✗
Train users to manually apply a sensitivity label to documents containing PII.
Why it's wrong here
Manual application depends on users recognising PII reliably, so coverage is inconsistent and the requirement for automatic labelling is unmet. Sensitivity labels are the right classification mechanism, but they must be applied by an auto-labelling policy in Microsoft Purview, not by user judgement.
- ✗
Configure a sensitivity label to encrypt documents containing PII.
Why it's wrong here
Encryption is a protection setting applied once a label is assigned; it does not itself detect PII or trigger labelling. The scenario needs automatic classification, so a sensitivity label must be paired with an auto-labelling policy using sensitive information types or trainable classifiers.
- ✗
Create a retention label for documents containing PII.
Why it's wrong here
Retention labels govern how long content is kept and when it is deleted, not classification or protection. They cannot detect PII or apply encryption. Auto-labelling requires a sensitivity label plus an auto-labelling policy that uses trainable classifiers or sensitive information types to find PII.
- ✓
Create an auto-labeling policy in Microsoft Purview that applies a sensitivity label to documents containing PII.
Why this is correct
An auto-labeling policy scans content at rest or in transit and applies the sensitivity label automatically when the PII sensitive info type matches, removing manual classification. This satisfies the stem's requirement that all documents containing PII are labelled without user intervention.
Go deeper
Related to this question
Learn chapter
Microsoft Purview Portal Overview
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
This MS-102 question is part of Courseiva's 712-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.