MS-102 Microsoft 365 Administrator Expert Implementing Data Loss Prevention 2

Question 1

A DLP policy is configured to detect credit card numbers in SharePoint. Users report legitimate business documents are being blocked. Which setting should you adjust to reduce false positives without disabling the policy?

Accepted Answer

Increase the instance count threshold before triggering the policy

Answer

Increasing the instance count threshold requires more occurrences of sensitive data before triggering a policy action, reducing false positives on documents with occasional credit card references.

Question 2

Which Microsoft 365 compliance feature allows you to test a DLP policy's impact before enforcing it in production?

Accepted Answer

Audit mode

Answer

Audit mode logs policy matches and generates alerts without blocking users, allowing administrators to assess impact before enforcement.

Question 3

You need to prevent users from sharing files containing SSNs via Teams chat but allow sharing within the same department. Which DLP condition should you configure?

Accepted Answer

Content is shared with people outside the organization

Answer

The 'Content is shared with people outside the organization' condition scopes the DLP rule to external sharing only, allowing internal departmental sharing to proceed.

Question 4

An administrator needs to allow a specific user to override a DLP block when sharing financial reports externally. Which action configuration enables this?

Accepted Answer

Allow override with business justification

Answer

Configuring 'Allow override with business justification' lets users bypass the DLP block by entering a reason, which is logged for auditing.

Question 5

Which endpoint DLP setting controls whether users can copy sensitive content detected on a managed device to a USB drive?

Accepted Answer

Unallowed removable storage device

Answer

The 'Unallowed removable storage device' setting in endpoint DLP blocks or audits attempts to copy sensitive content to USB or other removable media.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Implementing Data Loss Prevention 2