MS-100 Regulatory Frameworks & Compliance 4

Question 1

An organization subject to PCI DSS must prevent credit card numbers from being emailed externally. Which Microsoft 365 DLP action best satisfies this requirement?

Accepted Answer

Block the email and notify the sender

Answer

A DLP policy action that blocks the email and sends a policy tip to the sender prevents cardholder data from leaving the organization via email.

Question 2

Under GDPR, what is the maximum fine for the most serious violations, such as failure to obtain valid consent for data processing?

Accepted Answer

€20 million or 4% of global annual turnover

Answer

GDPR Article 83(5) sets the maximum fine for the most serious violations at €20 million or 4% of the total worldwide annual turnover, whichever is higher.

Question 3

A company needs to place a legal hold on all content related to a lawsuit without alerting the custodians. Which Microsoft Purview feature supports this?

Accepted Answer

eDiscovery hold applied silently to specific custodians

Answer

eDiscovery holds can be scoped to specific custodians and data sources in a case without sending notifications, preserving evidence while maintaining confidentiality.

Question 4

Which Microsoft 365 compliance report shows which sensitivity labels are most applied to documents across SharePoint and OneDrive?

Accepted Answer

Label activity explorer in Microsoft Purview

Answer

Activity Explorer in Microsoft Purview shows label application activity across Microsoft 365 services, including which labels are most frequently applied.

Question 5

An organization using Microsoft 365 E5 wants to automatically apply a retention label to all contracts stored in SharePoint. Which feature enables this without user intervention?

Accepted Answer

Auto-apply retention labels based on sensitive info types or trainable classifiers

Answer

Auto-apply retention label policies scan content and automatically apply labels based on conditions like sensitive information types or trainable classifiers.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Regulatory Frameworks & Compliance 4