MS-102 practice questions 121–130

1. Question 121 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains a SharePoint site named Site1. Site1 contains the files shown in the following table.

   

   You have the users shown in the following table.

   

   You create a data loss prevention (DLP) policy with an advanced DLP rule and apply the policy to Site1. The DLP rule is configured as shown in the following exhibit.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1.User1 can open File2: NO User1 is a Site owner and has the highest level of permissions. However, the DLP policy blocks access to files that contain sensitive information if the content meets the criteria of having an instance count of 3 to Any for the sensitive info type (IP Address). File2 contains 5 IP addresses, which triggers the policy, blocking access. 2. User2 can open File1: YES User2 is a Site Member with permissions to access files. File1 contains only 2 IP addresses, which does not meet the DLP policy's condition of having at least 3 instances. Therefore, User2 can still access File1. 3. Admin1 can open File2: NO Admin1, as a SharePoint Admin, typically has full control over SharePoint sites. However, the DLP policy is applied to restrict access to the content based on the defined rules, which applies to all users, including admins. Since File2 meets the criteria of the DLP policy, access is blocked.

   Source: Adapted from community discussion — Tr619899

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 122 · 396 in bank

   Select 2

   You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint site named site1. You need to ensure that site1 meets the following requirements: • Retains all data for 10 years • Prevents the sharing of data outside the organization Which two items should you create and apply to site1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Aa retention policy
   • Ba data loss prevention (DLP) policy
   • Ca retention label policy
   • Da sensitive info type
   • Ea retention label
   • Fa sensitivity label

   Show answer

   Answer: AB

   Explanation

   AF A. a retention policy - to retain all data for 10 years. F. a sensitivity label - to prevent sharing data outside the organization. Explanation Retention Policy: A retention policy allows you to specify how long data should be retained. In this case, setting a 10-year retention policy will ensure that all data on site1 is retained for the specified period. Sensitivity Label: Sensitivity labels can be configured with settings to control data access and sharing, such as preventing content from being shared externally. Applying a sensitivity label that restricts external sharing will help you meet the requirement of preventing data from being shared outside the organization. Why not B ? While DLP policies can prevent the sharing of sensitive data, they’re generally used for specific types of data, not for enforcing retention or general sharing restrictions at the site level.

   Source: Adapted from community discussion — Vince_MCT

   Next question

3. Question 123 · 396 in bank

   You have a Microsoft 365 E5 subscription. From the Microsoft Purview compliance portal, you create a new data loss prevention (DLP) policy named DLP1 that protects financial data from being shared by using Microsoft Teams messages. You apply DLP1 to the users in the finance department. An incident is raised when a finance department user named User1 shares financial data in a Teams channel that includes external members. When User1 uses Teams to send the same message in a 1:1 chat or a private channel, the message is blocked as expected. You need to ensure that User1 is prevented from sharing financial data in Teams channels that include external members. What should you do?

   • AEdit the settings of the team that contains the channel.
   • BEdit the Locations settings of DLP1.
   • CModify the licenses assigned to User1.
   • DEdit the policy rules of DLP1.

   Show answer

   Answer: B

   Explanation

   I think it should be B answer: Edit locations settings of DLP1. https://learn.microsoft.com/en-us/purview/dlp-microsoft-teams?tabs=purview#scope-of-dlp-protection "Restrict access or encrypt the content in Microsoft 365 locations > Block only people outside your organization"

   Source: Adapted from community discussion — justITtopics

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 124 · 396 in bank

   You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint. When users attempt to access the portal of a partner company, they receive the message shown in the following exhibit.

   

   You need to enable user access to the partner company's portal. Which Microsoft Defender for Endpoint setting should you modify?

   • AAlert notifications
   • BAlert suppression
   • CCustom detections
   • DAdvanced hunting
   • EIndicators

   Show answer

   Answer: E

   Explanation

   By creating indicators for IPs and URLs or domains, you can now allow or block IPs, URLs, or domains based on your own threat intelligence. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip-domain?view=o365-worldwide

   Source: Adapted from community discussion — Dtriminio

   References

   • Microsoft Learn

   Next question

5. Question 125 · 396 in bank

   You have a Microsoft 365 subscription. You need to create a data loss prevention (DLP) policy that is configured to use the Set headers action. To which location can the policy be applied?

   • AExchange email
   • BOneDrive accounts
   • CSharePoint sites
   • DTeams chat and channel messages

   Show answer

   Answer: A

   Explanation

   A. The Set headers action allows you to modify email headers to apply certain protections or classifications to messages in Exchange email.

   Source: Adapted from community discussion — Khattak3143

   Next question

6. Question 126 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

   

   You have labels in Microsoft 365 as shown in the following table.

   

   The content in Microsoft 365 is assigned labels as shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YNY There are two roles that grant access to content explorer and it is granted using the Microsoft Purview compliance portal: Content Explorer List viewer: Membership in this role group allows you to see each item and its location in list view. The data classification list viewer role has been pre-assigned to this role group. Content Explorer Content viewer: Membership in this role group allows you to view the contents of each item in the list. The data classification content viewer role has been pre-assigned to this role group. https://learn.microsoft.com/en-us/purview/data-classification-content-explorer

   Source: Adapted from community discussion — 0ef58a2

   References

   • Microsoft Learn

   

   Next question

7. Question 127 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains two users named user1@contoso.com and user2@contoso.com and a Microsoft SharePoint site named Site1. You create a data loss prevention (DLP) policy named DLP1 that has the advanced DLP rules shown in the following table.

   

   DLP1 is applied to Site1. You have the files shown in the following table.

   

   You copy the files to Site1. How many notifications will each user receive? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The explanation is: When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced. For example, if content matches all of the following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule: Rule 1: only notifies users Rule 2: notifies users, restricts access, and allows user overrides Rule 3: notifies users, restricts access, and doesn't allow user overrides Rule 4: restricts access Rules 1, 2, and 4 would be evaluated, but not applied. In this example, matches for all of the rules are recorded in the audit logs and shown in the DLP reports, even though only the most restrictive rule is applied. So because the most restrictive rule, I think : User1--> 4 User2--> 3

   Source: Adapted from community discussion — TonyManero

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 128 · 396 in bank

   You need to notify the manager of the human resources department when a user in the department shares a file or folder from the department's Microsoft SharePoint site. What should you do?

   • AFrom the SharePoint admin center, modify the sharing settings.
   • BFrom the SharePoint site, create an alert.
   • CFrom the Microsoft Purview compliance portal, create a data loss prevention (DLP) policy.
   • DFrom the Microsoft 365 Defender portal, create an alert policy.

   Show answer

   Answer: D

   Explanation

   D. From the Microsoft 365 Defender portal, create an alert policy. An alert policy can be used to send notifications when certain events occur, such as when a file or folder is shared from a SharePoint site.

   Source: Adapted from community discussion — Hard1k

   References

   • Microsoft Learn

   Next question

9. Question 129 · 396 in bank

   You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint. From Microsoft Defender for Endpoint, you turn on the Allow or block file advanced feature. You need to block users from downloading a file named File1.exe. What should you use?

   • Aa suppression rule
   • Ban indicator
   • Ca device configuration profile

   Show answer

   Answer: B

   Explanation

   To block users from downloading a file named File1.exe in Microsoft Defender for Endpoint, you should use an **indicator** (B). An indicator in Microsoft Defender for Endpoint is a security tool that allows you to block or allow files, URLs, domains, and IP addresses. Here's how you can do it: 1. Sign in to the Microsoft 365 Defender portal. 2. Under Endpoints, go to Settings. 3. Under the Rules heading, you will find the Indicators option. 4. Here, you can add the file (File1.exe) that you want to block. Please note that a suppression rule (A) is used to stop alerts from being triggered by known safe files and behaviors. A device configuration profile (C) is used to manage settings and features on devices in your organization.

   Source: Adapted from community discussion — Paul_white

   References

   • Microsoft Learn

   Next question

10. Question 130 · 396 in bank

    You have an Azure AD tenant that contains the users shown in the following table.

    

    You need to compare the permissions of each role. The solution must minimize administrative effort. Which portal should you use?

    • Athe Microsoft Purview compliance portal
    • Bthe Microsoft 365 admin center
    • Cthe Microsoft 365 Defender portal
    • Dthe Microsoft Entra admin center

    Show answer

    Answer: B

    Explanation

    Check it in my tenant Role - Role assignments - Azure AD / Intune / Billing - Choosing 2 Role - click button “compare Roles”

    Source: Adapted from community discussion — DiligentSam

    References

    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 121. 396 questions available.