Microsoft 365 Administrator Expert Configuring Information Protection Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Microsoft 365 Administrator Expert Configuring Information Protection flashcards as text
An administrator needs to prevent users from sending emails containing credit card numbers to external recipients. Which Microsoft 365 feature should be configured?
Answer: Data Loss Prevention policy
Data Loss Prevention (DLP) policies detect and block sensitive information like credit card numbers from being shared externally via email.
A company wants to classify documents as 'Confidential' and automatically apply a watermark when they are opened. Which component of Microsoft Purview handles this?
Answer: Sensitivity labels
Sensitivity labels in Microsoft Purview can apply visual markings such as watermarks, headers, and footers to classified documents.
Which Microsoft Purview feature allows administrators to automatically move emails older than 2 years to an archive mailbox?
Answer: Retention policies
Retention policies in Microsoft Purview can automatically move content to archive storage or delete it after a specified period.
A user attempts to share a file labeled 'Highly Confidential' via SharePoint with an external guest. The sensitivity label blocks this action. What label setting enforces this restriction?
Answer: External sharing controls embedded in the label
Sensitivity labels can include site and group settings that restrict external sharing for SharePoint sites hosting labeled content.
Which PowerShell module is used to manage Microsoft Purview sensitivity labels and DLP policies?
Answer: ExchangeOnlineManagement (Security & Compliance cmdlets)
The Security & Compliance PowerShell cmdlets, accessed via the ExchangeOnlineManagement module, are used to manage Purview sensitivity labels and DLP policies.
An organization wants to ensure that documents labeled 'Internal Only' cannot be opened by users outside the Azure AD tenant, even if the file is emailed externally. Which label configuration achieves this?
Answer: Configure label encryption using Azure Rights Management with tenant-only permissions
Applying Azure Rights Management encryption restricted to the tenant ensures only users within the organization can decrypt and open the file.
A compliance administrator needs to review all Teams messages that contain the phrase 'confidential project.' Which Microsoft Purview solution is best suited?
Answer: Communication compliance
Communication compliance policies in Microsoft Purview scan Teams, Exchange, and other channels for specified keywords and flag matching content for review.