Understand Microsoft Purview AB-900 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is investigating a potential data leak where an employee emailed a confidential spreadsheet to a personal address. The company wants to determine if this was a one-off mistake or part of a pattern of risky behavior. They also want to prevent future leaks without blocking all external email. What should they do?

   • AUse a retention policy to preserve all emails and then manually review all external emails
   • BUse communication compliance to review the email and block the employee's email account
   • CUse insider risk management to review the employee's history and related activities, and configure a DLP policy that blocks external sharing of confidential files with a user override
   • DUse a DLP policy that blocks all external email containing confidential files
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A marketing agency wants to protect client contracts stored in SharePoint so that only the account team can edit them, while others can view them. The agency also wants the protection to follow the documents if they are downloaded. What should they use?

   • AA DLP policy that blocks downloads of contracts
   • BA sensitivity label with encryption and permissions that restrict editing to the account team
   • CA SharePoint site permission change that removes edit rights from all users except the account team
   • DA retention policy that preserves contracts for 5 years
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A user at Fabrikam has been sending large volumes of customer data to a personal OneDrive account. The security team suspects malicious intent but is not certain. They want to investigate the user's activity patterns and also monitor for any inappropriate messages in Teams that might indicate collusion. Which two Purview solutions should they use together?

   • AInsider Risk Management and Communication Compliance
   • BCommunication Compliance and Data Loss Prevention
   • CData Loss Prevention and Data Lifecycle Management
   • DInformation Protection and Data Classification
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of Microsoft Purview Insider Risk Management?

   • ATo identify, analyze, and mitigate internal threats by detecting risky user activities.
   • BTo automatically encrypt all sensitive documents in the organization.
   • CTo block the transfer of sensitive data to external parties.
   • DTo monitor external communications for compliance with regulations.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which action can a Microsoft Purview DLP policy perform when it detects sensitive data being shared externally?

   • ACreate an insider risk alert for the user.
   • BBlock the sharing and notify the user with a policy tip.
   • CEncrypt the data with a sensitivity label after it is shared.
   • DAutomatically delete the sensitive data from the sender's device.
   Reveal Solution Discussion Select an answer first