Understand Microsoft Purview AB-900 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company wants to automatically identify and label all documents containing credit card numbers in SharePoint Online. They also want to see a report of where these documents are located. What should the administrator configure?

   • AA retention policy that retains all documents for 7 years
   • BAn insider risk policy that alerts on credit card data access
   • CA DLP policy that blocks sharing of credit card data
   • DA sensitivity label with auto-labeling for the credit card number sensitive info type, and use content explorer
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company wants to protect a set of documents that are shared with external partners. The documents contain trade secrets, and the company wants to ensure that only specific partner users can open them, and that the protection persists even if the documents are forwarded. However, the company also wants to allow the partner users to edit the documents. What should they do?

   • AUse a DLP policy that blocks forwarding of the documents
   • BShare the documents via a SharePoint link with restricted permissions
   • CApply a sensitivity label with encryption and co-authoring permissions for the specific partner users
   • DUse a retention policy to preserve the documents for 10 years
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which type of activity would Microsoft Purview Insider Risk Management typically monitor?

   • AA document being labeled as 'Confidential'.
   • BA user accessing a website with inappropriate content.
   • CA user downloading large volumes of files shortly before resigning.
   • DAn email containing a credit card number being sent externally.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A healthcare organization wants to prevent patient health information (PHI) from being emailed to personal addresses, but still allow PHI to be shared internally with other clinicians. The organization uses Microsoft 365 and has sensitivity labels for PHI. What should the administrator configure?

   • AA DLP policy that blocks external sharing of content labeled as PHI, with an override for internal recipients
   • BA sensitivity label that encrypts all PHI emails and requires the recipient to authenticate
   • CA retention policy that deletes PHI emails after 7 years
   • DAn insider risk policy that flags users who email PHI externally
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which capability is provided by Microsoft Purview DSPM for AI?

   • ACreating retention policies for AI-generated content.
   • BBlocking all external AI services.
   • CDetecting sensitive data that may be exposed to AI models.
   • DMonitoring insider threats related to AI usage.
   Reveal Solution Discussion Select an answer first