Information Protection & Governance Flashcards

Which Microsoft Purview feature is used to place a legal hold on a user's mailbox to preserve content for litigation?

Answer: eDiscovery hold (In-Place Hold)

eDiscovery holds in Microsoft Purview preserve mailbox content indefinitely or for a specified period to ensure it cannot be deleted during litigation.

What is the difference between a retention policy and a retention label in Microsoft Purview?

Answer: Retention policies apply to locations (sites, mailboxes); labels apply to individual items and can start retention from an event

Retention policies apply broadly to content locations, while retention labels apply to individual items and support advanced scenarios like event-based retention.

Which Microsoft Purview capability detects anomalous user behaviors like mass file deletion or excessive downloading that may indicate insider threats?

Answer: Insider Risk Management

Insider Risk Management uses machine learning to detect unusual patterns such as mass data exfiltration, file deletion, or access to sensitive data that indicate insider threats.

When a sensitivity label applies automatic encryption, which permission allows a recipient to read a document but not forward or copy it?

Answer: Viewer

The Viewer permission level in Azure RMS grants only the rights to view content, preventing forwarding, copying, printing, or editing.

Which Microsoft 365 compliance feature provides a unified dashboard showing an organization's compliance posture against regulatory frameworks?

Answer: Microsoft Purview Compliance Manager

Compliance Manager in Microsoft Purview provides a compliance score and actionable improvement actions mapped to regulatory frameworks like GDPR, ISO 27001, and NIST.

An organization must retain financial records for 7 years per US regulations. Which Microsoft Purview configuration enforces this?

Answer: Retention policy or label with a 7-year retain-then-delete setting applied to financial content locations

A retention policy or retention label configured to retain content for 7 years and then delete it ensures financial records meet the regulatory retention requirement.