100% Latest & Updated Microsoft MS-102 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 730
An enterprise wants confidential files to carry encryption and visual marking based on classification. Which setup action best implements the selected mechanism?
- Apply the supported Purview retention setting for the content location and duration.
- Define and test the custom sensitive information type in Microsoft Purview with the required regex and evidence.
- Create an eligible custom Purview DLP policy selecting the Copilot and Copilot Chat location and supported conditions.
- Configure the sensitivity label's encryption and content marking settings and publish it.
Explanation
Correct Answer
D:Configure the sensitivity label's encryption and content marking settings and publish it. This action operationalizes the selected approach: Use Microsoft Purview sensitivity labels for file protection where supported. The organization can then confirm success by checking: A labeled document applies the intended access restrictions and visual marking.
Incorrect Answers
A:Apply the supported Purview retention setting for the content location and duration. is directed at a separate task: A policy requires keeping content for seven years even when users try to delete it. It does not produce the required configuration outcome: A labeled document applies the intended access restrictions and visual marking.
B:Define and test the custom sensitive information type in Microsoft Purview with the required regex and evidence. implements a different mechanism for: Compliance needs to detect a proprietary employee identifier that follows a distinct pattern in documents. It does not configure the mechanism needed here: Use Microsoft Purview sensitivity labels for file protection where supported.
C:Create an eligible custom Purview DLP policy selecting the Copilot and Copilot Chat location and supported conditions. is directed at a separate task: An organization enables Copilot but must protect matching sensitive information within supported Microsoft 365 Copilot scenarios. It does not produce the required configuration outcome: A labeled document applies the intended access restrictions and visual marking.
Question 731
An enterprise wants confidential files to carry encryption and visual marking based on classification. Which observation provides the strongest evidence that the requirement was met?
- An attempted user deletion does not defeat the required retention obligation.
- The steward identifies content locations associated with the defined sensitive information type.
- A supported Power BI artifact triggers the intended sensitive-data policy alert.
- A labeled document applies the intended access restrictions and visual marking.
Explanation
Correct Answer
D:A labeled document applies the intended access restrictions and visual marking. This directly checks the stated goal: An enterprise wants confidential files to carry encryption and visual marking based on classification. It distinguishes success from the reported failure mode: A confidential document has a label name but no specified access protection.
Incorrect Answers
A:An attempted user deletion does not defeat the required retention obligation. would assess a different control. In this case it does not rule out the specific failure: A confidential document has a label name but no specified access protection.
B:The steward identifies content locations associated with the defined sensitive information type. is evidence of another system state: A data steward needs to locate repositories containing identified sensitive information types. The acceptance evidence here instead is: A labeled document applies the intended access restrictions and visual marking.
C:A supported Power BI artifact triggers the intended sensitive-data policy alert. would assess a different control. In this case it does not rule out the specific failure: A confidential document has a label name but no specified access protection.
Question 732
An enterprise wants confidential files to carry encryption and visual marking based on classification. The team observes: A confidential document has a label name but no specified access protection. Which configuration mistake best explains this reported failure?
- The protected location was not under an effective preservation policy.
- The sensitivity label's encryption or marking configuration was omitted.
- The protected keyword list was not updated to include the new alias.
- The Teams chat or channel workload was absent from policy scope.
Explanation
Correct Answer
B:The sensitivity label's encryption or marking configuration was omitted. That issue explains the observed symptom: A confidential document has a label name but no specified access protection. The relevant correction is: Configure the sensitivity label's encryption and content marking settings and publish it.
Incorrect Answers
A:The protected location was not under an effective preservation policy. would fit a different circumstance involving: A policy requires keeping content for seven years even when users try to delete it. Here the actual symptom is: A confidential document has a label name but no specified access protection.
C:The protected keyword list was not updated to include the new alias. is a plausible failure in another case: Documents with a new project alias are not classified as sensitive. It does not explain the current incident: A confidential document has a label name but no specified access protection.
D:The Teams chat or channel workload was absent from policy scope. would fit a different circumstance involving: A company wants DLP to apply to sensitive messages sent through supported Microsoft Teams chats. Here the actual symptom is: A confidential document has a label name but no specified access protection.
Question 733
Security wants employees to see an Internal label in Office desktop clients. Which administration approach most directly meets this requirement?
- Use Microsoft Purview Content explorer for supported sensitive-content visibility.
- Use a sensitive information type with a curated keyword list where appropriate.
- Use Purview DLP for supported SharePoint Online content and external sharing controls.
- Publish an appropriate sensitivity label to the target users and supported apps.
Explanation
Correct Answer
D:Publish an appropriate sensitivity label to the target users and supported apps. This decision addresses the specific business context: Security wants employees to see an Internal label in Office desktop clients. It is the architectural choice that supports the expected result: The Internal label appears in eligible Office labeling interfaces.
Incorrect Answers
A:Use Microsoft Purview Content explorer for supported sensitive-content visibility. can be useful when a data steward needs to locate repositories containing identified sensitive information types. However, it does not specifically achieve: The Internal label appears in eligible Office labeling interfaces.
B:Use a sensitive information type with a curated keyword list where appropriate. addresses another administrative need: An organization wants to identify a short list of confidential project code words in stored content. This question instead requires the outcome: The Internal label appears in eligible Office labeling interfaces.
C:Use Purview DLP for supported SharePoint Online content and external sharing controls. can be useful when confidential documents uploaded to SharePoint must not be shared to anonymous recipients. However, it does not specifically achieve: The Internal label appears in eligible Office labeling interfaces.
Question 734
Security wants employees to see an Internal label in Office desktop clients. Which concrete administrative action is appropriate in this case?
- Apply the supported Purview retention setting for the content location and duration.
- Open Content explorer with the necessary role and inspect sensitive information summaries.
- Include the Teams workload and sensitive information conditions in a DLP policy.
- Create or update the sensitivity label policy and scope it to the intended users.
Explanation
Correct Answer
D:Create or update the sensitivity label policy and scope it to the intended users. This action operationalizes the selected approach: Publish an appropriate sensitivity label to the target users and supported apps. The organization can then confirm success by checking: The Internal label appears in eligible Office labeling interfaces.
Incorrect Answers
A:Apply the supported Purview retention setting for the content location and duration. is directed at a separate task: A policy requires keeping content for seven years even when users try to delete it. It does not produce the required configuration outcome: The Internal label appears in eligible Office labeling interfaces.
B:Open Content explorer with the necessary role and inspect sensitive information summaries. implements a different mechanism for: A data steward needs to locate repositories containing identified sensitive information types. It does not configure the mechanism needed here: Publish an appropriate sensitivity label to the target users and supported apps.
C:Include the Teams workload and sensitive information conditions in a DLP policy. is directed at a separate task: A company wants DLP to apply to sensitive messages sent through supported Microsoft Teams chats. It does not produce the required configuration outcome: The Internal label appears in eligible Office labeling interfaces.
Question 735
Security wants employees to see an Internal label in Office desktop clients. Which recorded outcome is the best success criterion for this requirement?
- The steward identifies content locations associated with the defined sensitive information type.
- The Internal label appears in eligible Office labeling interfaces.
- Documents containing protected code words produce the intended sensitive-information match.
- A protected file's external sharing action is restricted when the policy matches.
Explanation
Correct Answer
B:The Internal label appears in eligible Office labeling interfaces. This directly checks the stated goal: Security wants employees to see an Internal label in Office desktop clients. It distinguishes success from the reported failure mode: A correctly created label is invisible in the employee's Office app.
Incorrect Answers
A:The steward identifies content locations associated with the defined sensitive information type. would assess a different control. In this case it does not rule out the specific failure: A correctly created label is invisible in the employee's Office app.
C:Documents containing protected code words produce the intended sensitive-information match. is evidence of another system state: An organization wants to identify a short list of confidential project code words in stored content. The acceptance evidence here instead is: The Internal label appears in eligible Office labeling interfaces.
D:A protected file's external sharing action is restricted when the policy matches. would assess a different control. In this case it does not rule out the specific failure: A correctly created label is invisible in the employee's Office app.
Question 736
Security wants employees to see an Internal label in Office desktop clients. The team observes: A correctly created label is invisible in the employee's Office app. What is the most likely primary cause of the observed problem?
- The appropriate Content explorer visibility or permission was not available.
- The regex or supporting match criteria are too broad for the intended sensitive information.
- The sensitivity label was not published to the employee's policy scope.
- Endpoint DLP device onboarding or the removable-media rule is missing.
Explanation
Correct Answer
C:The sensitivity label was not published to the employee's policy scope. That issue explains the observed symptom: A correctly created label is invisible in the employee's Office app. The relevant correction is: Create or update the sensitivity label policy and scope it to the intended users.
Incorrect Answers
A:The appropriate Content explorer visibility or permission was not available. would fit a different circumstance involving: A data steward needs to locate repositories containing identified sensitive information types. Here the actual symptom is: A correctly created label is invisible in the employee's Office app.
B:The regex or supporting match criteria are too broad for the intended sensitive information. is a plausible failure in another case: The custom detector flags arbitrary numbers without the required employee identifier structure. It does not explain the current incident: A correctly created label is invisible in the employee's Office app.
D:Endpoint DLP device onboarding or the removable-media rule is missing. would fit a different circumstance involving: A security team must prevent copying regulated files from managed laptops to removable drives. Here the actual symptom is: A correctly created label is invisible in the employee's Office app.
Question 737
An administrator wants to distinguish file sensitivity labeling from organizational content-retention requirements. Which primary Microsoft 365 capability best addresses the stated requirement?
- Use sensitivity labels for classification/protection and retention labels for lifecycle controls.
- Create a custom sensitive information type using a supported regular-expression pattern and confidence evidence.
- Use Microsoft Purview Content explorer for supported sensitive-content visibility.
- Use supported DLP test or simulation mode before turning on blocking actions.
Explanation
Correct Answer
A:Use sensitivity labels for classification/protection and retention labels for lifecycle controls. This decision addresses the specific business context: An administrator wants to distinguish file sensitivity labeling from organizational content-retention requirements. It is the architectural choice that supports the expected result: A document can have the planned classification protection and lifecycle obligations.
Incorrect Answers
B:Create a custom sensitive information type using a supported regular-expression pattern and confidence evidence. can be useful when compliance needs to detect a proprietary employee identifier that follows a distinct pattern in documents. However, it does not specifically achieve: A document can have the planned classification protection and lifecycle obligations.
C:Use Microsoft Purview Content explorer for supported sensitive-content visibility. addresses another administrative need: A data steward needs to locate repositories containing identified sensitive information types. This question instead requires the outcome: A document can have the planned classification protection and lifecycle obligations.
D:Use supported DLP test or simulation mode before turning on blocking actions. can be useful when a new DLP policy might disrupt legitimate workflows and must be assessed before enforcement. However, it does not specifically achieve: A document can have the planned classification protection and lifecycle obligations.
Question 738
An administrator wants to distinguish file sensitivity labeling from organizational content-retention requirements. What should the administrator configure to deliver the intended result?
- Open Content explorer with the necessary role and inspect sensitive information summaries.
- Configure separate sensitivity and retention policies with their respective purposes.
- Configure the protected keyword list and applicable match conditions in Purview.
- Deploy the policy in a nonblocking evaluation mode and examine matched events.
Explanation
Correct Answer
B:Configure separate sensitivity and retention policies with their respective purposes. This action operationalizes the selected approach: Use sensitivity labels for classification/protection and retention labels for lifecycle controls. The organization can then confirm success by checking: A document can have the planned classification protection and lifecycle obligations.
Incorrect Answers
A:Open Content explorer with the necessary role and inspect sensitive information summaries. is directed at a separate task: A data steward needs to locate repositories containing identified sensitive information types. It does not produce the required configuration outcome: A document can have the planned classification protection and lifecycle obligations.
C:Configure the protected keyword list and applicable match conditions in Purview. implements a different mechanism for: An organization wants to identify a short list of confidential project code words in stored content. It does not configure the mechanism needed here: Use sensitivity labels for classification/protection and retention labels for lifecycle controls.
D:Deploy the policy in a nonblocking evaluation mode and examine matched events. is directed at a separate task: A new DLP policy might disrupt legitimate workflows and must be assessed before enforcement. It does not produce the required configuration outcome: A document can have the planned classification protection and lifecycle obligations.
Question 739
An administrator wants to distinguish file sensitivity labeling from organizational content-retention requirements. What should be verified to confirm the implementation works?
- Test content matching the intended identifier is detected while unrelated strings are not.
- Documents containing protected code words produce the intended sensitive-information match.
- A document can have the planned classification protection and lifecycle obligations.
- An in-scope Teams message with regulated data triggers the expected response.
Explanation
Correct Answer
C:A document can have the planned classification protection and lifecycle obligations. This directly checks the stated goal: An administrator wants to distinguish file sensitivity labeling from organizational content-retention requirements. It distinguishes success from the reported failure mode: A file is encrypted but its mandatory record-retention duration is missing.
Incorrect Answers
A:Test content matching the intended identifier is detected while unrelated strings are not. would assess a different control. In this case it does not rule out the specific failure: A file is encrypted but its mandatory record-retention duration is missing.
B:Documents containing protected code words produce the intended sensitive-information match. is evidence of another system state: An organization wants to identify a short list of confidential project code words in stored content. The acceptance evidence here instead is: A document can have the planned classification protection and lifecycle obligations.
D:An in-scope Teams message with regulated data triggers the expected response. would assess a different control. In this case it does not rule out the specific failure: A file is encrypted but its mandatory record-retention duration is missing.
Question 740
An administrator wants to distinguish file sensitivity labeling from organizational content-retention requirements. The team observes: A file is encrypted but its mandatory record-retention duration is missing. Which implementation gap accounts for the symptom?
- The regex or supporting match criteria are too broad for the intended sensitive information.
- The protected keyword list was not updated to include the new alias.
- A sensitivity label was mistakenly treated as a replacement for retention policy.
- The Teams chat or channel workload was absent from policy scope.
Explanation
Correct Answer
C:A sensitivity label was mistakenly treated as a replacement for retention policy. That issue explains the observed symptom: A file is encrypted but its mandatory record-retention duration is missing. The relevant correction is: Configure separate sensitivity and retention policies with their respective purposes.
Incorrect Answers
A:The regex or supporting match criteria are too broad for the intended sensitive information. would fit a different circumstance involving: Compliance needs to detect a proprietary employee identifier that follows a distinct pattern in documents. Here the actual symptom is: A file is encrypted but its mandatory record-retention duration is missing.
B:The protected keyword list was not updated to include the new alias. is a plausible failure in another case: Documents with a new project alias are not classified as sensitive. It does not explain the current incident: A file is encrypted but its mandatory record-retention duration is missing.
D:The Teams chat or channel workload was absent from policy scope. would fit a different circumstance involving: A company wants DLP to apply to sensitive messages sent through supported Microsoft Teams chats. Here the actual symptom is: A file is encrypted but its mandatory record-retention duration is missing.
Microsoft 365 Administrator (MS-102) Practice Tests