Security & Compliance Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Compliance flashcards as text
An admin needs to ensure sensitive data leaving Microsoft 365 via email is blocked automatically. Which solution should they configure?
Answer: Data Loss Prevention (DLP) policy
DLP policies in Microsoft 365 detect and prevent the sharing of sensitive information through email and other channels.
Which Microsoft 365 Defender portal feature provides a unified view of incidents across endpoints, email, and identities?
Answer: Incidents & Alerts queue
The Incidents & Alerts queue in Microsoft 365 Defender correlates alerts across all workloads into unified incidents.
A company wants to classify emails containing credit card numbers automatically. Which Microsoft Purview feature provides built-in sensitive information types for this?
Answer: Sensitive information types (SITs)
Sensitive information types use pattern matching and confidence levels to detect data like credit card numbers automatically.
What is the purpose of Microsoft Defender for Office 365 Safe Links?
Answer: Rewrites and scans URLs at click-time to protect against malicious links
Safe Links rewrites URLs in emails and Office documents and checks them in real time when a user clicks, blocking known malicious destinations.
An administrator needs to review all content searches and eDiscovery cases in Microsoft Purview. Which role group must they be a member of?
Answer: eDiscovery Manager
The eDiscovery Manager role group allows members to create and manage eDiscovery cases and run content searches in Microsoft Purview.
Which feature in Microsoft Purview allows organizations to place a legal hold on a user's mailbox to preserve all content indefinitely?
Answer: Litigation hold
Litigation hold preserves all mailbox content for an indefinitely period, preventing deletion or modification of items.
A security admin wants to automatically investigate and remediate alerts without manual intervention in Microsoft 365 Defender. Which capability supports this?
Answer: Automated Investigation and Remediation (AIR)
AIR in Microsoft 365 Defender automatically investigates alerts and takes remediation actions based on configured settings.