HOTSPOT
You have a Microsoft 365 E5 subscription that uses Microsoft Purview.
You need to deploy a compliance solution that will detect the accidental oversharing of information outside of an organization. The solution must minimize administrative effort.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Policy template: Data leaks
Policy template prerequisite: A data loss prevention (DLP) policy
Explanation: The Data leaks template detects potential oversharing outside the organization. An existing DLP policy provides the trigger, minimizing additional configuration.
Question 133
You have a Microsoft 365 E5 subscription that contains the adaptive scopes shown in the following table.
You create the retention policies shown in the following table.
Which retention policies support a preservation lock?
A. RPolicy2 only
B. RPolicy3 only
C. RPolicy1 and RPolicy2 only
D. RPolicy1 and RPolicy3 only
E. RPolicy1, RPolicy2, and RPolicy3
Show Answer
Correct Answer: B
Explanation: RPolicy3 only. Preservation Lock isn’t supported for retention policies that use adaptive scopes; RPolicy3 is the policy that supports it.
Question 134
You have a Microsoft SharePoint Online site named Site1 that contains the files shown in the following table.
You have a data loss prevention (DLP) policy named DLP1 that has the advanced DLP rules shown in the following table.
You apply DLP1 to Site1.
Which policy tips will appear for File2?
A. Tip1 only
B. Tip2 only
C. Tip3 only
D. Tip1 and Tip2 only
Show Answer
Correct Answer: A
Explanation: File2 matches Rules 1 and 2, but SharePoint displays a single DLP policy tip rather than combining tips from matching rules. Rule 1 has the highest priority, so Tip1 appears.
Sources:
https://learn.microsoft.com/en-us/purview/dlp-policy-tips-reference
Question 135
HOTSPOT
You have a Microsoft 365 E5 tenant that contains the objects shown in the following table.
You need to restore a Microsoft Word document that was deleted from the Sales channel by User1.
From where can the document be restored, and how long will the document be retained if it is NOT restored? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Restored from: Microsoft SharePoint Online
Retained for: 93 days
Explanation: Files in a standard Teams channel are stored in SharePoint Online. A deleted file remains in SharePoint’s recycle bins for up to 93 days unless restored.
Question 136
HOTSPOT
You have a Microsoft 365 subscription that contains a sensitivity label named Contoso Confidential.
You publish Contoso Confidential to all users.
Contoso Confidential is configured as shown in the Configuration exhibit. (Click the Configuration tab.)
The Access control settings of Contoso Confidential are configured as shown in the Access control exhibit. (Click the Access control tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: 1. No
2. Yes
3. No
Explanation: Offline access is allowed for seven days, so disabling an account might not block a previously opened file immediately. Guest users can be authenticated users. Auto-labeling is set to None, so SharePoint files are not labeled automatically.
Question 137
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).
You have computers that run Windows 11 and have Microsoft 365 Apps installed. The computers are joined to a Microsoft Entra tenant.
You need to ensure that Endpoint DLP policies can protect content on the computers.
Solution: You onboard the computers to Microsoft Defender for Endpoint.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: A
Explanation: Yes. Endpoint DLP uses Microsoft Defender for Endpoint onboarding to make Windows devices available for endpoint protection. Once onboarded, the devices can be managed by Endpoint DLP; the DLP policies and device monitoring must also be configured in Microsoft Purview.
Question 138
DRAG DROP
You have a Microsoft 365 tenant.
A new regulatory requirement states that all documents containing a patent ID be labeled, retained for 10 years, and then deleted. The policy used to apply the retention settings must never be disabled or deleted by anyone.
You need to implement the regulatory requirement.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Show Answer
Correct Answer: 1. Create a retention label.
2. Create a retention label policy.
3. Add a preservation lock.
Explanation: Set the label to retain documents for 10 years and then delete them. Configure the label policy to auto-apply it to documents containing a patent ID. Preservation Lock prevents anyone from disabling or deleting the policy.
Question 139
You have a Microsoft 365 tenant that is opt-in for trainable classifiers.
You need to ensure that a user named User1 can create custom trainable classifiers. The solution must use the principle of least privilege.
Which role should you assign to User1?
A. Security Administrator
B. Compliance Administrator
C. Global Administrator
D. Security Operator
Show Answer
Correct Answer: B
Explanation: Assign User1 the Compliance Administrator role. It allows the user to create custom trainable classifiers and is less privileged than Global Administrator.
Question 140
You have a sensitive information type based on a trainable classifier.
You are unsatisfied with the result of the trainable classifier.
You need to retrain the classifier.
What should you use in the Microsoft Purview portal?
A. Content explorer from Data classification
B. Labels from information protection
C. Labels from information governance
D. Content search
Show Answer
Correct Answer: A
Explanation: Use Content explorer under Data classification. It lets you review items identified by the trainable classifier and provide feedback to improve or retrain it.
Question 141
HOTSPOT
You have a Microsoft 365 E5 subscription.
You have a Microsoft Purview Advanced Message Encryption branding template named OME1.
You need to create a Microsoft Exchange Online mail flow rule to apply OME1 to email.
How should you configure the rule? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Apply this rule if: The recipient → Is external/internal
To apply custom branding to OME1 messages: Modify the message security
Explanation: Scope the rule to external recipients, then use the message-security action to apply encryption with the OME1 branding template.
$19
Get all 268 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.