Courseiva

MS-102 Manage compliance by using Microsoft Purview Practice Question

Your organization is implementing Microsoft Purview Communication Compliance to detect potential insider trading. You need to scan internal emails for specific patterns and assign reviewers from the legal team. What is the minimum number of policies required?

⚠ Common exam trap

MS-102 often tests the misconception that each condition or reviewer group requires its own policy, when in fact Communication Compliance policies are designed to bundle multiple conditions and reviewers into a single policy.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

One policy with multiple conditions.

A single Communication Compliance policy can contain multiple conditions (such as sensitive info types, keyword dictionaries, and trainable classifiers) and can define multiple reviewers or reviewer groups within the same policy. Since the requirement is to scan internal emails for specific patterns AND assign legal reviewers, both can be configured inside one policy, making one the minimum number required.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    One policy with multiple conditions.

    Why this is correct

    A single Communication Compliance policy can combine multiple conditions, such as keyword or sensitive information type matches, to detect insider trading patterns across internal email. Reviewer assignment to the legal team is configured within that same policy, so no additional policies are needed to satisfy both the detection and review requirements.

  • ✗

    Three policies: one for patterns, one for reviewers, and one for storage.

    Why it's wrong here

    Reviewers and storage are configured as properties of a policy, not as standalone policies; no separate policy governs either. This split is tempting when mapping each requirement to its own object, but a single policy already carries patterns, reviewer assignments, and location scope.

  • ✗

    Zero, as Communication Compliance does not support custom policies.

    Why it's wrong here

    Communication Compliance fully supports custom policies with custom sensitive information types and trainable classifiers, so zero is factually wrong. It is tempting if you assume only built-in templates exist, but custom pattern detection is a core capability.

  • ✗

    Two policies: one for each pattern.

    Why it's wrong here

    Communication Compliance evaluates multiple sensitive information types and patterns within a single policy, so per-pattern policies multiply overhead without adding coverage. Separate policies are warranted only when different reviewers, scopes, or retention settings genuinely require isolation.

Go deeper

Related to this question

About these practice questions

Courseiva writes every MS-102 question from scratch — 712 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Microsoft exam blueprint

This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.