Microsoft 365 Administrator Expert Configuring Information Protection Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft 365 Administrator Expert Configuring Information Protection flashcards as text
Endpoint DLP is deployed on Windows devices. Which prerequisite must be met for Endpoint DLP to function on a device?
Answer: Microsoft Defender for Endpoint must be onboarded on the device
Endpoint DLP requires devices to be onboarded into Microsoft Defender for Endpoint, as it relies on that agent to monitor and enforce policies on the device.
A sensitivity label is configured with 'Do Not Forward' protection. What does this prevent in Outlook?
Answer: Recipients from forwarding, printing, or copying the email content
'Do Not Forward' is an Azure Rights Management protection that prevents recipients from forwarding, printing, or copying the protected email.
Which Microsoft Purview solution helps organizations calculate their compliance posture against frameworks like NIST and ISO 27001?
Answer: Compliance Manager
Microsoft Purview Compliance Manager provides a compliance score and improvement actions mapped to regulatory frameworks like NIST, ISO 27001, and GDPR.
An administrator wants to apply a sensitivity label automatically to all Office documents containing the term 'Classified – Internal' in the header. Which configuration supports this scenario?
Answer: Auto-labeling policy with a keyword sensitive information type
An auto-labeling policy using a custom keyword as a sensitive information type will automatically classify documents containing that specific term.
A Microsoft 365 administrator needs to place a legal hold on all mailbox content for a specific user involved in litigation. Which feature is used?
Answer: eDiscovery hold (litigation hold)
An eDiscovery hold (or litigation hold) preserves all mailbox content for a user, preventing deletion regardless of user or retention policy actions.
When configuring a DLP policy, an administrator sets the 'instance count' minimum to 5 for credit card numbers. What does this mean?
Answer: The policy triggers only when 5 or more distinct credit card numbers are found in a single item
The instance count threshold specifies the minimum number of sensitive information type occurrences in an item before the DLP rule triggers.
Which feature in Microsoft Purview allows administrators to see how a sensitivity label was applied to a document — whether manually, by default, or automatically?
Answer: Activity explorer
Activity explorer in Microsoft Purview shows label activity events including how and when a label was applied, changed, or removed on content.