HOTSPOT
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
You need to delegate the following tasks:
• Create and manage data loss prevention (DLP) policies.
• Review classified content by using Content explorer.
The solution must use the principle of least privilege.
Which user should perform each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Create and manage DLP policies: User1
Review classified content by using Content explorer: User3
Explanation: The Information Protection Administrator can manage DLP policies. The Information Protection Investigator can review classified items in Content explorer without receiving policy-management permissions.
Question 43
HOTSPOT
You create a retention policy as shown in the following exhibit.
A user named User1 deletes a file named File1.docx from a Microsoft SharePoint Online site named Site1.
A user named User2 deletes an email and empties the Deleted Items folder in Microsoft Outlook.
Where is the content retained one year after deletion? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: File1.docx: Preservation Hold
Email: Recoverable Items
Explanation: The 10-year retention policy preserves the deleted SharePoint file in the Preservation Hold library and the deleted Exchange email in Recoverable Items.
Question 44
HOTSPOT
You have a Microsoft SharePoint Online site named Site1 that contains the files shown in the following table.
You have a data loss prevention (DLP) policy named DLP1 that has the advanced DLP rules shown in the following table.
You apply DLP1 to Site1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: File1.txt: No
File2.docx: No
File3.dat: No
Explanation: Policy tips are not supported for the .txt and .dat files. File2.docx matches all three rules, but the highest-priority rule is Rule1, which specifies Tip1—not Tip3.
Question 45
HOTSPOT
You have a Microsoft 365 E5 subscription that contains two users named User1 and User2.
You have a Microsoft SharePoint site named Site1. Site1 stores files that contain IP addresses as shown in the following table.
User1 is assigned the SharePoint admin role for Site1. User2 is a member of Site1.
You create the data loss prevention (DLP) policy shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: User1 can view File1.txt: Yes
User2 can view File1.txt: No
User2 can view File2.docx: Yes
Explanation: File1.txt meets the two-IP-address threshold, so DLP blocks ordinary members but allows the site admin access. File2.docx has only one IP address, so the blocking rule does not apply.
Question 46
SIMULATION
Username and password
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and select the username below.
To enter your password, place your cursor in the Enter password box and select the password below.
Microsoft 365 Username:
Microsoft 365 Password: XXXXXXXXX
If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL “https://admin.microsoft.com”, and press Enter.
The following information is for technical support purposes only:
Lab Instance: XXXXXXXXX
Task 2
You need to ensure that email sent to external recipients with the word Falcon in the subject line will be encrypted by using an RMS template named Highly Confidential \ All Employees.
Show Answer
Correct Answer: In the Exchange admin center, go to Mail flow → Rules and create a rule:
Condition: Subject includes “Falcon”.
Condition: Recipient is outside the organization.
Action: Apply the RMS template “Highly Confidential \ All Employees”.
Save and enable the rule.
Explanation: The rule encrypts messages only when both conditions are met: the subject contains Falcon and the recipient is external.
Question 47
You have a Microsoft 365 E5 tenant that contains a user named User1. User1 is assigned the Compliance Administrator role.
User1 cannot view the regular expression in the IP Address sensitive info type.
You need to ensure that User1 can view the regular expression.
What should you do?
A. Assign User1 the Global Reader role.
B. Assign User1 to the Reviewer role group.
C. Create a copy of the IP Address sensitive info type and instruct User1 to edit the copy.
D. Instruct User1 to use the Test function on the sensitive info type.
Show Answer
Correct Answer: C
Explanation: Built-in sensitive information types don’t expose their regular-expression definition for viewing. Create a copy of the IP Address sensitive information type; the regex is visible in the copy. Changing User1’s role or using the Test function won’t reveal the built-in definition.
Question 48
HOTSPOT
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. Site1 contains three files named File1, File2, and File3.
You create the data loss prevention (DLP) policies shown in the following table.
The DLP rule matches for each file are shown in the following table.
How many DLP policy matches events will be added to Activity explorer, and how many policy matches will be added to the DLP incidents report? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: Activity explorer records each matching rule: two per file. The incidents report counts policy matches per file: one for File1, one for File2, and two for File3.
Question 49
HOTSPOT
You have a Microsoft 365 tenant named contoso.com that contains two users named User1 and User2. The tenant uses Microsoft Purview Message Encryption.
User1 plans to send emails that contain attachments as shown in the following table.
User2 plans to send emails that contain attachments as shown in the following table.
For which emails will the attachments be encrypted? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: User1: Mail2 and Mail3 only
User2: Mail4 and Mail6 only
Explanation: Supported Office attachments can remain encrypted for both internal and external recipients. Mail1 exceeds the size limit, and Mail5 is a JPG rather than a supported Office attachment.
Question 50
You need to create a retention policy to retain all the files from Microsoft Teams channel conversations and private chats.
Which two locations should you select in the retention policy? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Microsoft 365 groups
B. Exchange email
C. Team channel messages
D. SharePoint sites
E. OneDrive accounts
F. Team chats
Show Answer
Correct Answer: D, E
Explanation: Files shared in Teams channel conversations are stored in the team’s SharePoint site, while files shared in private chats are stored in the sender’s OneDrive for Business. Select SharePoint sites and OneDrive accounts to retain both sets of files.
Question 51
HOTSPOT
You have a Microsoft 365 E5 tenant that contains two users named User1 and User2 and a Microsoft SharePoint Online site named Sitel as shown in the following exhibit.
For Site1, the users are assigned the roles shown in the following table.
You publish a retention label named Retention1 to Site1.
To which files can the users apply Retention1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: User1: File1.docx and File2.docx only
User2: File1.docx and File2.docx only
Explanation: Both the Owner and Member roles can apply a published retention label to files they can edit. File3.docx is blocked, so neither user can apply the label to it.
$19
Get all 268 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.