MS-102 practice questions 131–140

1. Question 131 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You plan to create the data loss prevention (DLP) policies shown in the following table.

   

   You need to create DLP rules for each policy. Which policies support the sender is condition and the file extension is condition? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer is correct. Only Exchange DLP lets you specify both the sender & file extension. SharePoint & OneDrive can create rules for "Files Extension" only.

   Source: Adapted from community discussion — Khanbaba43

   References

   • Microsoft Learn

   

   Next question

2. Question 132 · 396 in bank

   You have a Microsoft 365 E5 subscription that contains a user named User1. You create a retention label named Retention1 that is published to all locations. You need to ensure that User1 can label email messages by using Retention1 as soon as possible. Which cmdlet should you run in Microsoft Exchange Online PowerShell?

   • AStart-ManagedFolderAssistant
   • BStart-MpScan
   • CStart-AppBackgroundTask
   • DStart-Process

   Show answer

   Answer: A

   Explanation

   This question is difficult, there is no specific documentation that informs us we can start the sync process of retention label to EXO, it takes a maximum of 7 days for retention policy and the same concept appears for retention label, in theory, the only thing we can do when we publish a retention policy or retention label is wait until the backend process run automatically. option A: MFA is the only option feasible for this question because this command restarts the review for the item for the retention policy or retention label. but personally, I don't think there is a correct answer, I just go with the A because it makes more sense based on the explanation for each command. https://learn.microsoft.com/en-us/purview/create-retention-policies?view=o365-worldwide&tabs=teams-retention#how-long-it-takes-for-retention-policies-to-take-effect

   Source: Adapted from community discussion — sergioandreslq

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 133 · 396 in bank

   You have a Microsoft 365 E5 tenant. You create an auto-labeling policy to encrypt emails that contain a sensitive info type. You specify the locations where the policy will be applied. You need to deploy the policy. What should you do first?

   • ARun the policy in simulation mode.
   • BConfigure Azure Information Protection analytics.
   • CReview the sensitive information in Activity explorer.
   • DTurn on the policy.

   Show answer

   Answer: A

   Explanation

   Simulation mode is unique to auto-labeling policies and woven into the workflow. You can't automatically label documents and emails until your policy has run at least one simulation. https://www.examtopics.com/discussions/microsoft/view/56712-exam-ms-101-topic-3-question-92-discussion/

   Source: Adapted from community discussion — Paul_white

   Next question

4. Question 134 · 396 in bank

   HOTSPOT - From the Microsoft Purview compliance portal, you create a retention policy named Policy1. You need to prevent all users from disabling the policy or reducing the retention period. How should you configure the Azure PowerShell command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

5. Question 135 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E3 subscription. You plan to launch Attack simulation training for all users. Which social engineering technique and training experience will be available? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   "Note Attack simulation training offers a subset of capabilities to E3 customers as a trial. The trial offering contains the ability to use a Credential Harvest payload and the ability to select 'ISA Phishing' or 'Mass Market Phishing' training experiences. No other capabilities are part of the E3 trial offering" ref: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide

   Source: Adapted from community discussion — imlearningstuffagain

   References

   • Microsoft Learn

   

   Next question

6. Question 136 · 396 in bank

   You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices: • Windows 10 • Android • iOS On which devices can you configure the Endpoint DLP policies?

   • AWindows 10 only
   • BWindows 10 and Android only
   • CWindows 10 and iOS only
   • DWindows 10, Android, and iOS

   Show answer

   Answer: A

   Explanation

   A.Endpoint data loss prevention (Endpoint DLP) extends the activity monitoring and protection capabilities of DLP to sensitive items that are physically stored on Windows 10/11 and macOS (the three latest released major versions) devices. Once devices are onboarded into the Microsoft Purview solutions, the information about what users are doing with sensitive items is made visible in activity explorer. You can then enforce protective actions on those items via DLP policies. https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about

   Source: Adapted from community discussion — jt2214

   References

   • Microsoft Learn

   Next question

7. Question 137 · 396 in bank

   HOTSPOT - Your company has a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table.

   

   You create a retention label named Label1 that has the following configurations: • Retains content for five years • Automatically deletes all content that is older than five years You turn on Auto labeling for Label1 by using a policy named Policy1. Policy1 has the following configurations: • Applies to content that contains the word Merger • Specifies the OneDrive accounts and SharePoint sites locations You run the following command. Set-RetentionCompliancePolicy Policyl -RestrictiveRetention $true -Force For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   N: Compliance Data Admin does not have sufficient privilege. N: You cannot remove location once the preservation lock is in place. Y: You can still add.

   Source: Adapted from community discussion — king001

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 138 · 396 in bank

   You are testing a data loss prevention (DLP) policy to protect the sharing of credit card information with external users. During testing, you discover that a user can share credit card information with external users by using email. However, the user is prevented from sharing files that contain credit card information by using Microsoft SharePoint. You need to prevent the user from sharing the credit card information by using email and SharePoint. What should you configure?

   • Athe locations of the DLP policy
   • Bthe conditions of the DLP policy rule
   • Cthe user overrides of the DLP policy rule
   • Dthe status of the DLP policy

   Show answer

   Answer: A

   Explanation

   Correct answer. Tested in lab. It's A because the policy already exists and is working. You are just changing the locations.

   Source: Adapted from community discussion — Wazery

   Next question

9. Question 139 · 396 in bank

   HOTSPOT - From the Microsoft Purview compliance portal, you configure a data loss prevention (DLP) policy for a Microsoft SharePoint site named Site1. Site1 contains the roles shown in the following table.

   

   Prvi creates the files shown in the exhibit. (Click the Exhibit tab.)

   

   Which files can User1 and User2 open? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   File3 cannot be access by anyone apart from the owner, last user modified the document and site owner. File2 seems to only have a notification and not block applied. Visitor or member does not play a role in this case. Therefore I believe the right answer is File1 and File2 for both users.

   Source: Adapted from community discussion — Wazery

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 140 · 396 in bank

    Select 2

    You have a Microsoft 365 subscription that uses retention policies. You implement a preservation lock on a retention policy that is assigned to all executive users. Which two actions can you perform on the retention policy after you implemented the preservation lock? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • AAdd locations to the policy.
    • BReduce the duration of policy.
    • CRemove locations from the policy.
    • DExtend the duration of the policy.
    • EDisable the policy.

    Show answer

    Answer: AD

    Explanation

    When a preservation lock is implemented on a retention policy in Microsoft 365, it significantly restricts what can be done with that policy, especially in terms of reducing its retention capabilities. This is designed to ensure that the policy remains in compliance with regulations or internal governance requirements. Given the options, here's what can and cannot be done: A. Add locations to the policy. D. Extend the duration of the policy.

    Source: Adapted from community discussion — Testtest123

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 131. 396 questions available.