Manage compliance by using Microsoft Purview →mediumMultiple Select

MS-102 Manage compliance by using Microsoft Purview Practice Question

Your organization uses Microsoft Purview Compliance Manager to manage compliance activities. Which TWO actions can be performed directly from Compliance Manager?

⚠ Common exam trap

Many candidates confuse the Microsoft Purview compliance portal's overall capabilities with the specific, limited set of actions that can be performed directly within the Compliance Manager solution, leading them to select actions that are available elsewhere in the portal but not inside Compliance Manager.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Assign an improvement action to a user.

Compliance Manager is a solution within Microsoft Purview that provides a centralized dashboard for managing compliance activities. It allows you to assign improvement actions to specific users to track responsibility and progress, and to upload evidence files directly to an improvement action to demonstrate compliance with a control. These are core, direct functions of the Compliance Manager interface.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Assign an improvement action to a user.
Why this is correct
Assigning an improvement action to a user is a core function inside Compliance Manager. Every improvement action has an owner field, and you can set that owner directly from the action's details page to assign responsibility. This ensures accountability for specific regulatory controls and enables tracking of implementation status within the compliance scoring workflow.
✓
Upload evidence for an improvement action.
Why this is correct
Evidence upload for an improvement action is also a native Compliance Manager feature. From the action's flyout, you can attach documents such as policy snapshots, configuration exports, or audit logs that substantiate the control's implementation. This evidence becomes part of the compliance record and is used during assessment cycles to validate that the action is actually in place.
✗
View and manage DLP alerts.
Why it's wrong here
Viewing and managing DLP alerts is wrong because that is a data-loss-prevention workload, not a Compliance Manager function. DLP alert triage happens in the Microsoft 365 Defender portal or the compliance center's alerts section where you can review policy matches, incidents, and escalations. Compliance Manager is purely a control-assessment and scoring engine and does not ingest or process real-time DLP alert telemetry.
✗
Create a retention policy for Exchange Online.
Why it's wrong here
Creating a retention policy for Exchange Online is done in the Microsoft Purview portal under Data Lifecycle Management, not in Compliance Manager. Retention policies are configuration items that govern mailbox content deletion and preservation, whereas Compliance Manager only tracks whether such policies exist as evidence of a control. You would not launch retention policy creation from within an improvement action's interface.
✗
Create a sensitivity label.
Why it's wrong here
Sensitivity labels are created under Information Protection in the Microsoft Purview portal, which is a separate administrative console. Compliance Manager cannot create or modify sensitivity labels because its role is limited to scoring your organization against predefined controls and regulation templates. Label management involves defining classification metadata, encryption rules, and auto-labeling settings, all of which live outside Compliance Manager.

Go deeper

MS-102 Manage compliance by using Microsoft Purview Practice Question

Why each option matters

Option-by-option breakdown

Related to this question