MS-500 Information Protection & Governance 1 — Questions and Answers
Question 1: Which Microsoft Purview feature allows organizations to classify and protect documents and emails using labels?
- Retention policies
- Sensitivity labels (Correct answer)
- Communication compliance
- eDiscovery
Correct answer: Sensitivity labels
Sensitivity labels in Microsoft Purview allow organizations to classify content and apply protection actions such as encryption and access restrictions.
Question 2: What is the function of a Data Loss Prevention (DLP) policy in Microsoft 365?
- Encrypt all emails sent outside the organization
- Detect and prevent sharing of sensitive information in violation of policy (Correct answer)
- Block users from installing third-party applications
- Archive all communications for compliance
Correct answer: Detect and prevent sharing of sensitive information in violation of policy
DLP policies identify sensitive information types across Microsoft 365 services and apply protective actions such as blocking sharing or alerting administrators.
Question 3: Which Microsoft Purview feature allows an organization to keep content for a specific period and then delete it automatically?
- Sensitivity labels
- Retention policies (Correct answer)
- Communication compliance policies
- Insider risk management
Correct answer: Retention policies
Retention policies in Microsoft Purview define how long content must be retained and can automatically delete content when the retention period expires.
Question 4: When applying a sensitivity label with encryption, which technology is used to enforce access controls?
- BitLocker
- Azure Rights Management (Azure RMS) (Correct answer)
- S/MIME
- TLS
Correct answer: Azure Rights Management (Azure RMS)
Sensitivity labels with encryption use Azure Rights Management (Azure RMS) to embed access controls directly in the protected file or email.
Question 5: Which Microsoft 365 feature scans documents stored in SharePoint Online for sensitive information types automatically?
- Safe Attachments for SharePoint
- Microsoft Purview DLP with SharePoint scanner (Correct answer)
- Microsoft Defender for Cloud Apps file policies
- SharePoint auditing
Correct answer: Microsoft Purview DLP with SharePoint scanner
Microsoft Purview DLP can automatically scan SharePoint Online and OneDrive content to detect sensitive information types and enforce protective actions.
Question 6: Which role is required to create and manage sensitivity labels in the Microsoft Purview compliance portal?
- Global Reader
- Compliance Administrator (Correct answer)
- SharePoint Administrator
- Exchange Administrator
Correct answer: Compliance Administrator
The Compliance Administrator role grants the permissions needed to create, configure, and publish sensitivity labels in the Microsoft Purview compliance portal.
MS-500 Information Protection & Governance 1
Which Microsoft Purview feature allows organizations to classify and protect documents and emails using labels?