MS-102 Microsoft 365 Administrator Expert Implementing Data Loss Prevention 4 — Questions and Answers
Question 1: An organization wants to detect when employees email more than 5 credit card numbers in a single message. Which DLP rule element controls the quantity threshold?
- Instance count (Correct answer)
- Confidence level
- Policy priority
- Accuracy threshold
Correct answer: Instance count
The instance count in a DLP rule specifies the minimum and maximum number of occurrences of a sensitive information type required to trigger the rule.
Question 2: Which built-in sensitive information type should you use in a DLP policy to detect U.S. bank account numbers?
- U.S. Bank Account Number (Correct answer)
- U.S. Individual Taxpayer Identification Number
- ABA Routing Number
- U.S. Driver's License Number
Correct answer: U.S. Bank Account Number
The 'U.S. Bank Account Number' sensitive information type is purpose-built to detect U.S. bank account numbers in content.
Question 3: You need to create a custom sensitive information type to detect your company's proprietary project codes formatted as 'PRJ-XXXX'. Which tool in Microsoft Purview supports this?
- Custom sensitive information type with regex pattern (Correct answer)
- Trainable classifier
- Keyword dictionary
- Document fingerprint
Correct answer: Custom sensitive information type with regex pattern
Custom sensitive information types using regular expressions allow you to define exact patterns like 'PRJ-XXXX' for detection in DLP policies.
Question 4: Which Microsoft Purview feature uses machine learning to identify sensitive content based on examples rather than fixed patterns?
- Trainable classifiers (Correct answer)
- Document fingerprinting
- Keyword dictionaries
- Exact data match
Correct answer: Trainable classifiers
Trainable classifiers use machine learning trained on content samples to identify sensitive categories without relying on explicit patterns or keywords.
Question 5: A DLP policy uses Exact Data Match (EDM) to protect a database of customer records. What is the maximum number of data elements supported per EDM schema?
- 10
- 100 (Correct answer)
- 50
- 500
Correct answer: 100
EDM schemas support up to 100 data elements (columns) per schema, allowing granular matching against large structured datasets.
Question 6: After deploying a DLP policy, you notice it is not applying to newly created SharePoint sites. What is the most likely cause?
- New sites require up to 24 hours for DLP policy propagation (Correct answer)
- DLP policies do not support SharePoint Online
- The policy must be manually reapplied to each new site
- New sites need a sensitivity label before DLP applies
Correct answer: New sites require up to 24 hours for DLP policy propagation
DLP policy changes and new site inclusions can take up to 24 hours to propagate fully across SharePoint Online.
Question 7: Which PowerShell cmdlet is used to create a new DLP compliance policy in Microsoft 365?
- New-DlpCompliancePolicy (Correct answer)
- New-DlpPolicy
- Set-DlpComplianceRule
- Add-DlpPolicy
Correct answer: New-DlpCompliancePolicy
New-DlpCompliancePolicy is the Security & Compliance PowerShell cmdlet used to create new DLP policies in Microsoft 365.
MS-102 Microsoft 365 Administrator Expert Implementing Data Loss Prevention 4
An organization wants to detect when employees email more than 5 credit card numbers in a single message.
Which DLP rule element controls the quantity threshold?