MS-102 Microsoft 365 Administrator Expert Configuring Information Protection 3 — Questions and Answers
Question 1: An auto-labeling policy is configured to label emails containing Social Security Numbers as 'Sensitive PII.' In simulation mode, what does the admin see?
- Labels are applied immediately to matching content
- A report showing what would be labeled without actually applying labels (Correct answer)
- Users receive notifications about pending labels
- Content is quarantined for review
Correct answer: A report showing what would be labeled without actually applying labels
Simulation mode for auto-labeling shows administrators a preview of which items would be labeled, without making any actual changes.
Question 2: Which Microsoft Purview capability scans on-premises file shares and SharePoint Server repositories to identify and label sensitive data?
- Microsoft Purview Information Protection scanner (Correct answer)
- Microsoft Defender for Endpoint
- Microsoft Compliance Manager
- Endpoint DLP
Correct answer: Microsoft Purview Information Protection scanner
The Microsoft Purview Information Protection scanner is an on-premises agent that discovers, classifies, and labels files in local repositories.
Question 3: A DLP policy is set to audit credit card data shared via Teams but not block it. An administrator wants to escalate this to block sharing. Which setting should be changed?
- Change the rule action from 'Audit' to 'Block' (Correct answer)
- Enable simulation mode
- Increase the confidence level threshold
- Add a retention label condition
Correct answer: Change the rule action from 'Audit' to 'Block'
Changing the DLP rule action from Audit (or Generate alert) to Block will prevent the content from being shared when the policy condition is matched.
Question 4: Which role is required to create and publish sensitivity labels in the Microsoft Purview compliance portal?
- Global Reader
- Compliance Administrator (Correct answer)
- Security Reader
- Exchange Administrator
Correct answer: Compliance Administrator
The Compliance Administrator role (or Information Protection Administrator) has the permissions needed to create, configure, and publish sensitivity labels.
Question 5: A label policy is published to a specific security group. A user not in that group opens a labeled document. What happens?
- The label is removed from the document automatically
- The user cannot open the document
- The user can view the label but cannot apply or change it in their apps (Correct answer)
- The label is downgraded to a lower classification
Correct answer: The user can view the label but cannot apply or change it in their apps
Users not included in a label policy cannot apply or modify labels in their apps, but they can still see and interact with existing labels on content they have access to.
Question 6: An organization uses trainable classifiers in Microsoft Purview. What is a trainable classifier's primary advantage over built-in sensitive information types?
- It uses regex patterns for faster matching
- It can identify content based on examples rather than predefined patterns (Correct answer)
- It integrates with third-party DLP tools
- It applies labels without admin approval
Correct answer: It can identify content based on examples rather than predefined patterns
Trainable classifiers learn to identify content based on positive and negative examples provided during training, making them suitable for unique organizational content types.
Question 7: A company needs to prevent users in the Legal department from communicating with users in the Trading department for compliance reasons. Which Microsoft Purview feature should be configured?
- Sensitivity labels
- Information barriers (Correct answer)
- Communication compliance
- Insider risk management
Correct answer: Information barriers
Information barriers in Microsoft Purview restrict communication and collaboration between specified segments of users within an organization.
MS-102 Microsoft 365 Administrator Expert Configuring Information Protection 3
An auto-labeling policy is configured to label emails containing Social Security Numbers as 'Sensitive PII.' In simulation mode, what does the admin see?