100% Latest & Updated Microsoft MS-102 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 720
A records manager wants an employee to manually choose a retention classification on eligible documents. The team observes: The label exists in Purview but is unavailable to document owners. What is the most likely primary cause of the observed problem?
- The protected keyword list was not updated to include the new alias.
- The regex or supporting match criteria are too broad for the intended sensitive information.
- The SharePoint location or sharing restriction was omitted from applicable DLP conditions.
- The retention label was created but not published through an applicable policy.
Explanation
Correct Answer
D:The retention label was created but not published through an applicable policy. That issue explains the observed symptom: The label exists in Purview but is unavailable to document owners. The relevant correction is: Create a retention label policy that makes approved labels available to the target location.
Incorrect Answers
A:The protected keyword list was not updated to include the new alias. would fit a different circumstance involving: An organization wants to identify a short list of confidential project code words in stored content. Here the actual symptom is: The label exists in Purview but is unavailable to document owners.
B:The regex or supporting match criteria are too broad for the intended sensitive information. is a plausible failure in another case: The custom detector flags arbitrary numbers without the required employee identifier structure. It does not explain the current incident: The label exists in Purview but is unavailable to document owners.
C:The SharePoint location or sharing restriction was omitted from applicable DLP conditions. would fit a different circumstance involving: Confidential documents uploaded to SharePoint must not be shared to anonymous recipients. Here the actual symptom is: The label exists in Purview but is unavailable to document owners.
Question 721
A legal group must distinguish a retention period that starts on creation from one based on a later event. Which primary Microsoft 365 capability best addresses the stated requirement?
- Use a sensitive information type with a curated keyword list where appropriate.
- Create a custom sensitive information type using a supported regular-expression pattern and confidence evidence.
- Choose retention-label settings based on the intended retention trigger.
- Apply Purview DLP to eligible OneDrive accounts for specific sensitive data patterns.
Explanation
Correct Answer
C:Choose retention-label settings based on the intended retention trigger. This decision addresses the specific business context: A legal group must distinguish a retention period that starts on creation from one based on a later event. It is the architectural choice that supports the expected result: The retention calculation begins from the approved date or event.
Incorrect Answers
A:Use a sensitive information type with a curated keyword list where appropriate. can be useful when an organization wants to identify a short list of confidential project code words in stored content. However, it does not specifically achieve: The retention calculation begins from the approved date or event.
B:Create a custom sensitive information type using a supported regular-expression pattern and confidence evidence. addresses another administrative need: Compliance needs to detect a proprietary employee identifier that follows a distinct pattern in documents. This question instead requires the outcome: The retention calculation begins from the approved date or event.
D:Apply Purview DLP to eligible OneDrive accounts for specific sensitive data patterns. can be useful when employees store sensitive customer files in OneDrive and the organization wants targeted sharing protection. However, it does not specifically achieve: The retention calculation begins from the approved date or event.
Question 722
A legal group must distinguish a retention period that starts on creation from one based on a later event. What should the administrator configure to deliver the intended result?
- Configure the protected keyword list and applicable match conditions in Purview.
- Define and test the custom sensitive information type in Microsoft Purview with the required regex and evidence.
- Configure a DLP policy with a supported OneDrive location and required sensitive-content conditions.
- Configure the label's retention starting point or supported event-based trigger as required.
Explanation
Correct Answer
D:Configure the label's retention starting point or supported event-based trigger as required. This action operationalizes the selected approach: Choose retention-label settings based on the intended retention trigger. The organization can then confirm success by checking: The retention calculation begins from the approved date or event.
Incorrect Answers
A:Configure the protected keyword list and applicable match conditions in Purview. is directed at a separate task: An organization wants to identify a short list of confidential project code words in stored content. It does not produce the required configuration outcome: The retention calculation begins from the approved date or event.
B:Define and test the custom sensitive information type in Microsoft Purview with the required regex and evidence. implements a different mechanism for: Compliance needs to detect a proprietary employee identifier that follows a distinct pattern in documents. It does not configure the mechanism needed here: Choose retention-label settings based on the intended retention trigger.
C:Configure a DLP policy with a supported OneDrive location and required sensitive-content conditions. is directed at a separate task: Employees store sensitive customer files in OneDrive and the organization wants targeted sharing protection. It does not produce the required configuration outcome: The retention calculation begins from the approved date or event.
Question 723
A legal group must distinguish a retention period that starts on creation from one based on a later event. What should be verified to confirm the implementation works?
- Documents containing protected code words produce the intended sensitive-information match.
- The retention calculation begins from the approved date or event.
- Test content matching the intended identifier is detected while unrelated strings are not.
- An in-scope Teams message with regulated data triggers the expected response.
Explanation
Correct Answer
B:The retention calculation begins from the approved date or event. This directly checks the stated goal: A legal group must distinguish a retention period that starts on creation from one based on a later event. It distinguishes success from the reported failure mode: Records expire too early because a creation-based clock was used instead of a legal close event.
Incorrect Answers
A:Documents containing protected code words produce the intended sensitive-information match. would assess a different control. In this case it does not rule out the specific failure: Records expire too early because a creation-based clock was used instead of a legal close event.
C:Test content matching the intended identifier is detected while unrelated strings are not. is evidence of another system state: Compliance needs to detect a proprietary employee identifier that follows a distinct pattern in documents. The acceptance evidence here instead is: The retention calculation begins from the approved date or event.
D:An in-scope Teams message with regulated data triggers the expected response. would assess a different control. In this case it does not rule out the specific failure: Records expire too early because a creation-based clock was used instead of a legal close event.
Question 724
A legal group must distinguish a retention period that starts on creation from one based on a later event. The team observes: Records expire too early because a creation-based clock was used instead of a legal close event. Which implementation gap accounts for the symptom?
- The appropriate Content explorer visibility or permission was not available.
- The protected keyword list was not updated to include the new alias.
- The retention start trigger does not match the records schedule.
- DLP policy event evidence was not examined for the attempted activity.
Explanation
Correct Answer
C:The retention start trigger does not match the records schedule. That issue explains the observed symptom: Records expire too early because a creation-based clock was used instead of a legal close event. The relevant correction is: Configure the label's retention starting point or supported event-based trigger as required.
Incorrect Answers
A:The appropriate Content explorer visibility or permission was not available. would fit a different circumstance involving: A data steward needs to locate repositories containing identified sensitive information types. Here the actual symptom is: Records expire too early because a creation-based clock was used instead of a legal close event.
B:The protected keyword list was not updated to include the new alias. is a plausible failure in another case: Documents with a new project alias are not classified as sensitive. It does not explain the current incident: Records expire too early because a creation-based clock was used instead of a legal close event.
D:DLP policy event evidence was not examined for the attempted activity. would fit a different circumstance involving: Compliance officers want to review whether a DLP rule blocked an external transfer yesterday. Here the actual symptom is: Records expire too early because a creation-based clock was used instead of a legal close event.
Question 725
A policy requires keeping content for seven years even when users try to delete it. Which technology or control should the team select for this specific need?
- Configure the supported default label in the user-targeted sensitivity label policy.
- Use an appropriate retention configuration that preserves content throughout the required period.
- Use labeling activity evidence and appropriate audit history in Microsoft Purview.
- Configure Purview DLP for supported Teams chat and channel messages.
Explanation
Correct Answer
B:Use an appropriate retention configuration that preserves content throughout the required period. This decision addresses the specific business context: A policy requires keeping content for seven years even when users try to delete it. It is the architectural choice that supports the expected result: An attempted user deletion does not defeat the required retention obligation.
Incorrect Answers
A:Configure the supported default label in the user-targeted sensitivity label policy. can be useful when the company needs a default sensitivity label for new Office documents in a controlled department. However, it does not specifically achieve: An attempted user deletion does not defeat the required retention obligation.
C:Use labeling activity evidence and appropriate audit history in Microsoft Purview. addresses another administrative need: A data protection officer wants to prove that a label was changed by an employee on a certain day. This question instead requires the outcome: An attempted user deletion does not defeat the required retention obligation.
D:Configure Purview DLP for supported Teams chat and channel messages. can be useful when a company wants DLP to apply to sensitive messages sent through supported Microsoft Teams chats. However, it does not specifically achieve: An attempted user deletion does not defeat the required retention obligation.
Question 726
A policy requires keeping content for seven years even when users try to delete it. Which implementation step most directly establishes the required behavior?
- Apply the supported Purview retention setting for the content location and duration.
- Configure the sensitivity label's encryption and content marking settings and publish it.
- Create or update the sensitivity label policy and scope it to the intended users.
- Open DLP alerts or activity events and filter by policy, time and workload.
Explanation
Correct Answer
A:Apply the supported Purview retention setting for the content location and duration. This action operationalizes the selected approach: Use an appropriate retention configuration that preserves content throughout the required period. The organization can then confirm success by checking: An attempted user deletion does not defeat the required retention obligation.
Incorrect Answers
B:Configure the sensitivity label's encryption and content marking settings and publish it. is directed at a separate task: An enterprise wants confidential files to carry encryption and visual marking based on classification. It does not produce the required configuration outcome: An attempted user deletion does not defeat the required retention obligation.
C:Create or update the sensitivity label policy and scope it to the intended users. implements a different mechanism for: Security wants employees to see an Internal label in Office desktop clients. It does not configure the mechanism needed here: Use an appropriate retention configuration that preserves content throughout the required period.
D:Open DLP alerts or activity events and filter by policy, time and workload. is directed at a separate task: Compliance officers want to review whether a DLP rule blocked an external transfer yesterday. It does not produce the required configuration outcome: An attempted user deletion does not defeat the required retention obligation.
Question 727
A policy requires keeping content for seven years even when users try to delete it. Which acceptance result is most directly relevant to this scenario?
- The report identifies label usage and relevant labeling events.
- The event shows the relevant actor, time and labeling action.
- A protected file's external sharing action is restricted when the policy matches.
- An attempted user deletion does not defeat the required retention obligation.
Explanation
Correct Answer
D:An attempted user deletion does not defeat the required retention obligation. This directly checks the stated goal: A policy requires keeping content for seven years even when users try to delete it. It distinguishes success from the reported failure mode: Required records disappear permanently after a user removes a file.
Incorrect Answers
A:The report identifies label usage and relevant labeling events. would assess a different control. In this case it does not rule out the specific failure: Required records disappear permanently after a user removes a file.
B:The event shows the relevant actor, time and labeling action. is evidence of another system state: A data protection officer wants to prove that a label was changed by an employee on a certain day. The acceptance evidence here instead is: An attempted user deletion does not defeat the required retention obligation.
C:A protected file's external sharing action is restricted when the policy matches. would assess a different control. In this case it does not rule out the specific failure: Required records disappear permanently after a user removes a file.
Question 728
A policy requires keeping content for seven years even when users try to delete it. The team observes: Required records disappear permanently after a user removes a file. What root cause should be investigated first?
- The protected keyword list was not updated to include the new alias.
- The published label policy lacks the default label or targets the wrong users.
- The protected location was not under an effective preservation policy.
- The DLP rule was enforced without a suitable test-mode evaluation.
Explanation
Correct Answer
C:The protected location was not under an effective preservation policy. That issue explains the observed symptom: Required records disappear permanently after a user removes a file. The relevant correction is: Apply the supported Purview retention setting for the content location and duration.
Incorrect Answers
A:The protected keyword list was not updated to include the new alias. would fit a different circumstance involving: An organization wants to identify a short list of confidential project code words in stored content. Here the actual symptom is: Required records disappear permanently after a user removes a file.
B:The published label policy lacks the default label or targets the wrong users. is a plausible failure in another case: New files in the department remain unlabeled despite an approved default policy. It does not explain the current incident: Required records disappear permanently after a user removes a file.
D:The DLP rule was enforced without a suitable test-mode evaluation. would fit a different circumstance involving: A new DLP policy might disrupt legitimate workflows and must be assessed before enforcement. Here the actual symptom is: Required records disappear permanently after a user removes a file.
Question 729
An enterprise wants confidential files to carry encryption and visual marking based on classification. What design decision would best satisfy the stated constraint?
- Use Microsoft Purview Content explorer for supported sensitive-content visibility.
- Use an appropriate retention configuration that preserves content throughout the required period.
- Use Microsoft Purview sensitivity labels for file protection where supported.
- Investigate DLP activity with user, file, destination and rule context.
Explanation
Correct Answer
C:Use Microsoft Purview sensitivity labels for file protection where supported. This decision addresses the specific business context: An enterprise wants confidential files to carry encryption and visual marking based on classification. It is the architectural choice that supports the expected result: A labeled document applies the intended access restrictions and visual marking.
Incorrect Answers
A:Use Microsoft Purview Content explorer for supported sensitive-content visibility. can be useful when a data steward needs to locate repositories containing identified sensitive information types. However, it does not specifically achieve: A labeled document applies the intended access restrictions and visual marking.
B:Use an appropriate retention configuration that preserves content throughout the required period. addresses another administrative need: A policy requires keeping content for seven years even when users try to delete it. This question instead requires the outcome: A labeled document applies the intended access restrictions and visual marking.
D:Investigate DLP activity with user, file, destination and rule context. can be useful when a protected endpoint file transfer produces alerts but the SOC must separate a real data leak from a benign test. However, it does not specifically achieve: A labeled document applies the intended access restrictions and visual marking.
Question 730
An enterprise wants confidential files to carry encryption and visual marking based on classification. Which setup action best implements the selected mechanism?
- Apply the supported Purview retention setting for the content location and duration.
- Define and test the custom sensitive information type in Microsoft Purview with the required regex and evidence.
- Create an eligible custom Purview DLP policy selecting the Copilot and Copilot Chat location and supported conditions.
- Configure the sensitivity label's encryption and content marking settings and publish it.
Explanation
Correct Answer
D:Configure the sensitivity label's encryption and content marking settings and publish it. This action operationalizes the selected approach: Use Microsoft Purview sensitivity labels for file protection where supported. The organization can then confirm success by checking: A labeled document applies the intended access restrictions and visual marking.
Incorrect Answers
A:Apply the supported Purview retention setting for the content location and duration. is directed at a separate task: A policy requires keeping content for seven years even when users try to delete it. It does not produce the required configuration outcome: A labeled document applies the intended access restrictions and visual marking.
B:Define and test the custom sensitive information type in Microsoft Purview with the required regex and evidence. implements a different mechanism for: Compliance needs to detect a proprietary employee identifier that follows a distinct pattern in documents. It does not configure the mechanism needed here: Use Microsoft Purview sensitivity labels for file protection where supported.
C:Create an eligible custom Purview DLP policy selecting the Copilot and Copilot Chat location and supported conditions. is directed at a separate task: An organization enables Copilot but must protect matching sensitive information within supported Microsoft 365 Copilot scenarios. It does not produce the required configuration outcome: A labeled document applies the intended access restrictions and visual marking.
Microsoft 365 Administrator (MS-102) Practice Tests