You plan to implement inside 365 E5 subscription.
You plan to implement insider risk management for users that manage sensitive data associated with a project.
You need to create a protection policy for the users. The solution must meet the following requirements:
• Minimize the impact on users who are NOT part of the project.
• Minimize administrative effort.
What should you do first?
A. From the Microsoft Entra admin center, create a security group.
B. From the Microsoft Purview compliance portal, create an insider risk management policy.
C. From the Microsoft Purview compliance portal, create a priority user group.
D. From the Microsoft Entra admin center, create a risky users policy.
Show Answer
Correct Answer: C
Explanation: Create a priority user group first in Microsoft Purview Insider Risk Management. Priority user groups are designed to scope enhanced protection and monitoring to a specific set of users, such as members of a confidential project, minimizing impact on other users and simplifying later policy assignment. After the priority user group exists, it can be referenced by insider risk management policies.
Question 84
HOTSPOT
-
You have a Microsoft 365 sensitivity label that is published to all the users in your Microsoft Entra tenant as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
No
Explanation: The label is available to users but is not automatically applied to all documents. The content marking shown includes only a watermark, not a header. Nothing indicates the label is restricted to documents containing the word 'rebranding'.
Question 85
You have a Microsoft 365 alert named Alert2 as shown in the following exhibit.
You need to manage the status of Alert2.
To which status can you change Alert2?
A. The status cannot be changed.
B. Dismissed only
C. Investigating only
D. Active or Investigating only
E. Investigating, Active, or Dismissed.
Show Answer
Correct Answer: E
Explanation: Microsoft Purview alerts support changing an alert's status among the available management states. From the alert management interface, an alert can be assigned Active, Investigating, Resolved, or Dismissed. Therefore, an alert such as Alert2 can be changed to Active, Investigating, or Dismissed (assuming it is not already fixed at a terminal state in the exhibit).
Question 86
HOTSPOT
-
You have a Microsoft SharePoint Online site named Site1 that contains the files shown in the following table.
You have a data loss prevention (DLP) policy named DLP1 that has the advanced DLP rules shown in the following table.
You apply DLP1 to Site1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
No
Explanation: Rules are evaluated by priority. Rule1 (priority 0) matches any file with at least one IP address, so its policy tip is the one shown. Therefore File1 has Tip1, while File2 and File3 do not show Tip3 or Tip2.
Question 87
You have a Microsoft SharePoint Online site named Site1 that contains a document library. The library contains more than 1,000 documents. Some of the documents are job applicant resumes. All the documents are in the English language.
You plan to apply a sensitivity label automatically to any document identified as a resume. Only documents that contain work experience, education, and accomplishments must be labeled automatically.
You need to identify and categorize the resumes. The solution must minimize administrative effort.
What should you include in the solution?
A. a trainable classifier
B. an exact data match (EDM) classifier
C. a function
D. a keyword dictionary
Show Answer
Correct Answer: A
Explanation: Trainable classifiers in Microsoft Purview are designed to identify document categories such as resumes based on learned content patterns (for example, work experience, education, and accomplishments) rather than exact matches or simple keywords. This minimizes administrative effort compared to maintaining keyword dictionaries or custom functions. Exact Data Match is intended for structured sensitive data, not document-type classification.
Question 88
DRAG DROP
-
You have a Microsoft 365 E5 subscription.
You need to configure Microsoft Priva Privacy Risk Management polices to generate alerts for the following scenarios:
• Scenario1: Personal customer data is stored in files located on publicly accessible Microsoft SharePoint Online sites
• Scenario2: Personal customer data is discussed in a Microsoft Teams chat.
• Scenario3: Personal customer data is emailed outside of an organization.
Which policy template should you use for each scenario? To answer, drag the appropriate policy templates to the correct scenarios. Each template may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Scenario1: Data overexposure
Scenario2: Data transfers
Scenario3: Data transfers
Explanation: Data overexposure detects personal data stored in overly accessible locations such as publicly accessible SharePoint sites. Data transfers detects movement or sharing of personal data across defined boundaries, including Teams chats and emails, whether internal or external. Data minimization is for stale personal data that should be retained or deleted.
Question 89
You have a Microsoft 365 E5 subscription.
You need to create a subject rights request.
What can be configured as a search location?
A. Microsoft Exchange Online only
B. Microsoft SharePoint Online only
C. Microsoft Exchange Online and SharePoint Online only
D. Microsoft Exchange Online and Teams only
E. Microsoft Exchange Online, SharePoint Online, and Teams
Show Answer
Correct Answer: C
Explanation: When creating a Microsoft Priva Subject Rights Request, the configurable search locations are Exchange and SharePoint. Teams content is included through these services (Teams chats are stored in Exchange; Teams channel files/messages are associated with SharePoint), but Teams is not presented as a separate selectable search location. Therefore, the configurable locations are Exchange Online and SharePoint Online only.
Question 90
You have a Microsoft 365 E5 subscription that contains a user named User1 and a Microsoft SharePoint Online site named Site1.
You create the alert policy shown in the following exhibit.
To Site1, User1 uploads the files shown in the following table.
How many alerts will be generated in response to the file uploads?
A. 1
B. 2
C. 3
D. 4
E. 5
Show Answer
Correct Answer: B
Explanation: The policy applies only to .docx uploads, so the .xlsx file does not generate an alert. In Microsoft 365 E5, alert aggregation combines multiple matching events that occur within one minute into a single alert. Based on the upload times, the matching .docx uploads fall into two one-minute aggregation windows, resulting in two alerts total.
Question 91
You have a Microsoft 365 subscription.
You have a team named Team1 in Microsoft Teams.
You plan to place all the content in Team1 on hold.
You need to identify which mailbox and which Microsoft SharePoint site collection are associated to Team1.
Which cmdlet should you use?
A. Get-UnifiedGroup
B. Get-TeamChannel
C. Get-MailUser
D. Get-Team
Show Answer
Correct Answer: A
Explanation: Microsoft Teams teams are backed by Microsoft 365 Groups. The Get-UnifiedGroup cmdlet retrieves the Microsoft 365 group properties, including the associated group mailbox and the SharePoint site URL used by the team. Get-Team returns team configuration but not the associated mailbox and SharePoint site collection details; Get-TeamChannel returns channel information; Get-MailUser is unrelated.
Question 92
You have a Microsoft 365 E5 subscription that contains the resources shown in the following table.
You have a retention label configured as shown in the following exhibit.
You publish the retention label and set the scope as shown in the following exhibit.
You apply the label to the resources.
Which items can you delete?
A. Mail1 only
B. File1.docx and File2.xlsx only
C. Mail1 and File1.docx only
D. Mail1 and File2.xlsx only
E. Mail1, File1.docx, and File2.xlsx
Show Answer
Correct Answer: E
Explanation: A retention label that retains content without declaring it as a record does not prevent users from deleting labeled items. When a labeled item is deleted, Microsoft 365 preserves a copy in the appropriate preservation location for the retention period. Therefore, the email and both labeled documents can be deleted by the user while retention is still enforced.
$19
Get all 318 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.