Security & Compliance Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Compliance flashcards as text
An organization needs to ensure that only compliant devices can access Microsoft 365 resources. Which feature enforces device compliance as an access condition?
Answer: Conditional Access with device compliance requirement
Conditional Access policies can require that devices meet Intune compliance requirements before granting access to Microsoft 365 resources.
What happens to email messages that match a Microsoft Purview retention policy with a 'retain and delete' action after the retention period expires?
Answer: They are moved to the Recoverable Items folder and then purged
When a retain-and-delete retention policy expires, items are moved to the Recoverable Items folder where they are purged after the deletion period.
Which Microsoft Purview feature provides a workflow for requesting, approving, and auditing access to privileged administrative tasks?
Answer: Privileged Access Management (PAM)
Privileged Access Management in Microsoft Purview enforces just-in-time, just-enough access for privileged tasks in Microsoft 365 through an approval workflow.
An admin configures a Safe Attachments policy in Microsoft Defender for Office 365 with the 'Dynamic Delivery' action. What does this do?
Answer: Delivers the email body immediately while scanning the attachment in a sandbox, then re-attaches it
Dynamic Delivery allows the email body to reach the recipient immediately while the attachment is detonated in a sandbox, then delivered once deemed safe.
A security team wants to create a custom detection rule that triggers an alert when a specific behavior pattern is observed. Which Microsoft 365 Defender feature supports this?
Answer: Custom detection rules via Advanced Hunting
Custom detection rules in Microsoft 365 Defender are built on Advanced Hunting KQL queries and trigger alerts or actions when defined conditions are met.
Which Microsoft Purview feature allows an admin to make a mailbox inactive while still preserving its content for compliance after an employee leaves?
Answer: Litigation hold applied before license removal
Applying a litigation hold or In-Place hold before removing the user's license converts the mailbox to an inactive mailbox, preserving content indefinitely.
An organization using Microsoft Purview wants to automatically apply a retention label to documents containing specific keywords. Which feature enables this?
Answer: Auto-apply retention label policy using keyword query
Auto-apply retention label policies can use keyword queries, sensitive information types, or trainable classifiers to automatically label matching content.