MS-102 - Microsoft 365 Administrator Expert Configuring Information Protection Questions and Answers

Question 1

An organization needs to automatically apply a 'Confidential' sensitivity label to all documents stored in a specific SharePoint Online site.
This label must encrypt the content and restrict access.
What is the most direct method to configure this requirement in the Microsoft Purview compliance portal?

Accepted Answer

Create an auto-labeling policy that targets the specific SharePoint site location and applies the 'Confidential' label.

Answer

Create a Data Loss Prevention (DLP) policy that applies to the SharePoint site and triggers on any content.

Answer

Configure a default sensitivity label directly on the document library settings within the SharePoint site.

Answer

Publish the 'Confidential' sensitivity label to all users and rely on them to apply it manually.

Question 2

A company wants to prevent employees from sharing documents containing EU Debit Card Numbers with anyone outside the organization via email. Which component is the fundamental building block used within a Data Loss Prevention (DLP) policy to detect this specific type of information?

Accepted Answer

A Sensitive Information Type (SIT)

Answer

A Retention Label

Answer

A Trainable Classifier

Answer

An Adaptive Scope

Question 3

An administrator is configuring a 'Highly Confidential' sensitivity label. The requirement is that any email with this label applied must be encrypted and recipients must be prevented from forwarding, printing, or copying the content. Which setting within the sensitivity label configuration directly provides this 'Do Not Forward' functionality?

Accepted Answer

Encryption

Answer

Content marking

Answer

Auto-labeling for files and emails

Answer

Site and group settings

Question 4

A financial services company needs to discover, classify, and apply protection to sensitive client files stored on a large on-premises Windows Server file share. The company has no immediate plans to migrate this data to Microsoft 365. Which Microsoft Purview tool should be deployed to meet this requirement?

Accepted Answer

Microsoft Purview Information Protection scanner

Answer

Microsoft Defender for Cloud Apps

Answer

Endpoint Data Loss Prevention (DLP)

Answer

Microsoft Entra Connect

Question 5

You are configuring a Data Loss Prevention (DLP) policy to monitor for the sharing of project codenames. Your goal is to educate users without blocking their actions. When a user attempts to send an email containing a project codename, you want a small notification to appear in Outlook informing them of a potential policy violation. Which DLP policy setting should you configure?

Accepted Answer

Enable user notifications and show policy tips

Answer

Set the incident report severity to 'Low'

Answer

Restrict access and block everyone

Answer

Add an exception for internal users

Question 6

A compliance officer needs to find and review the actual contents of all documents in SharePoint Online and OneDrive for Business that have the 'Attorney-Client Privilege' sensitivity label applied. Which tool within the Microsoft Purview portal provides a direct view of these classified files?

Accepted Answer

Content explorer

Answer

Activity explorer

Answer

Audit log search

Answer

Content search (eDiscovery)