Microsoft 365 Administrator Expert Configuring Information Protection Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft 365 Administrator Expert Configuring Information Protection flashcards as text
An organization wants to protect sensitive documents shared via SharePoint so that only authenticated users from the tenant can access them, even via a shared link. Which label setting achieves this?
Answer: Set label encryption with permissions limited to the organization's domain
Configuring encryption on the sensitivity label restricted to the organization's domain ensures that only authenticated internal users can open the document regardless of the sharing method.
A Microsoft 365 administrator reviews a DLP alert and notices a user justified overriding a block by providing a business reason. Where is this justification stored?
Answer: The Audit log in the Microsoft Purview compliance portal
User override justifications for DLP policy matches are recorded as audit events in the Microsoft Purview Audit log.
Which Microsoft Purview feature uses machine learning to detect unusual data exfiltration patterns, such as a user downloading and emailing large volumes of files before resignation?
Answer: Insider risk management
Insider risk management uses machine learning and behavioral signals to detect potentially risky activity such as data theft around employee departure.
A sensitivity label policy has a default label configured. What happens when a user creates a new blank Word document and saves it without selecting a label?
Answer: The default label is automatically applied to the document
When a default label is configured in the label policy, it is automatically applied to new documents created by users covered by that policy.
An administrator configures Exact Data Match (EDM) in Microsoft Purview. What is the primary benefit of EDM over standard sensitive information types?
Answer: EDM matches against an organization's specific database of sensitive values rather than generic patterns
Exact Data Match allows organizations to define sensitive information types based on actual data in a custom database, reducing false positives compared to generic pattern-based types.
A label with encryption is applied to a file shared via OneDrive. The encryption uses Azure Rights Management. If the Rights Management service is disabled for the tenant, what happens to the encrypted file?
Answer: Authorized users can no longer open or access the encrypted file
Azure Rights Management encryption requires the service to be active; if disabled, users cannot obtain the licenses needed to decrypt and open protected files.
An administrator configures a retention label with 'Trigger retention based on an event.' Which scenario best represents an event-based retention use case?
Answer: Retain employee HR records for 5 years from the employee's termination date
Event-based retention starts the retention clock when a specific business event occurs, such as employee termination, making it ideal for HR records tied to lifecycle events.