MS-102 Security & Compliance 3 — Questions and Answers
Question 1: Which Microsoft Purview feature enables administrators to apply labels that enforce encryption, access restrictions, and content markings on documents?
- Retention labels
- Sensitivity labels (Correct answer)
- Insider risk policies
- Data loss prevention
Correct answer: Sensitivity labels
Sensitivity labels enforce encryption, visual markings, and access controls on labeled content across Microsoft 365 apps.
Question 2: An organization wants to monitor for potential insider threats such as data theft by departing employees. Which Microsoft Purview feature should they use?
- Communication Compliance
- Insider Risk Management (Correct answer)
- Data Loss Prevention
- Information Barriers
Correct answer: Insider Risk Management
Insider Risk Management uses machine learning to identify and investigate risky user behaviors like data exfiltration by departing employees.
Question 3: What does the Microsoft Secure Score measure?
- The number of active threats detected in the tenant
- An organization's security posture based on configured security controls (Correct answer)
- The spam filter effectiveness rate
- Compliance score for regulatory frameworks
Correct answer: An organization's security posture based on configured security controls
Microsoft Secure Score measures an organization's security posture by evaluating enabled security controls and recommending improvements.
Question 4: An admin needs to prevent users in Finance from communicating with users in HR via Teams. Which Microsoft Purview feature enforces this?
- Sensitivity labels
- Information Barriers (Correct answer)
- Communication Compliance
- Conditional Access
Correct answer: Information Barriers
Information Barriers prevent communication and collaboration between specified groups in Microsoft Teams, SharePoint, and OneDrive.
Question 5: Which Microsoft Defender for Office 365 feature simulates phishing attacks to train end users?
- Safe Attachments
- Attack Simulator (Attack simulation training) (Correct answer)
- Threat Explorer
- Safe Links
Correct answer: Attack Simulator (Attack simulation training)
Attack simulation training in Microsoft Defender for Office 365 lets admins run simulated phishing campaigns to measure and improve user awareness.
Question 6: An organization must retain all Teams chat messages for 5 years to meet regulatory requirements. Which tool in Microsoft Purview should be configured?
- Sensitivity label
- eDiscovery case
- Retention policy (Correct answer)
- Compliance score
Correct answer: Retention policy
Retention policies in Microsoft Purview control how long content is retained and can be scoped to Teams chats and other workloads.
Question 7: Which report in the Microsoft 365 Defender portal shows the latest intelligence on active threat campaigns and provides mitigation guidance?
- Incidents queue
- Secure Score recommendations
- Threat Analytics (Correct answer)
- Advanced Hunting
Correct answer: Threat Analytics
Threat Analytics provides reports authored by Microsoft security researchers on active threats, including impact assessment and mitigation steps.
MS-102 Security & Compliance 3
Which Microsoft Purview feature enables administrators to apply labels that enforce encryption, access restrictions, and content markings on documents?