Microsoft 365 Administrator Expert Implementing Data Loss Prevention Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft 365 Administrator Expert Implementing Data Loss Prevention flashcards as text
An organization wants to detect when employees email more than 5 credit card numbers in a single message. Which DLP rule element controls the quantity threshold?
Answer: Instance count
The instance count in a DLP rule specifies the minimum and maximum number of occurrences of a sensitive information type required to trigger the rule.
Which built-in sensitive information type should you use in a DLP policy to detect U.S. bank account numbers?
Answer: U.S. Bank Account Number
The 'U.S. Bank Account Number' sensitive information type is purpose-built to detect U.S. bank account numbers in content.
You need to create a custom sensitive information type to detect your company's proprietary project codes formatted as 'PRJ-XXXX'. Which tool in Microsoft Purview supports this?
Answer: Custom sensitive information type with regex pattern
Custom sensitive information types using regular expressions allow you to define exact patterns like 'PRJ-XXXX' for detection in DLP policies.
Which Microsoft Purview feature uses machine learning to identify sensitive content based on examples rather than fixed patterns?
Answer: Trainable classifiers
Trainable classifiers use machine learning trained on content samples to identify sensitive categories without relying on explicit patterns or keywords.
A DLP policy uses Exact Data Match (EDM) to protect a database of customer records. What is the maximum number of data elements supported per EDM schema?
Answer: 100
EDM schemas support up to 100 data elements (columns) per schema, allowing granular matching against large structured datasets.
After deploying a DLP policy, you notice it is not applying to newly created SharePoint sites. What is the most likely cause?
Answer: New sites require up to 24 hours for DLP policy propagation
DLP policy changes and new site inclusions can take up to 24 hours to propagate fully across SharePoint Online.
Which PowerShell cmdlet is used to create a new DLP compliance policy in Microsoft 365?
Answer: New-DlpCompliancePolicy
New-DlpCompliancePolicy is the Security & Compliance PowerShell cmdlet used to create new DLP policies in Microsoft 365.