Understand Microsoft Purview AB-900 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary goal of Microsoft Purview Data Lifecycle Management?

   • ATo monitor user activities for potential data leaks.
   • BTo classify data based on its sensitivity level.
   • CTo manage data from creation to deletion, ensuring it is retained and disposed of according to organizational and regulatory requirements.
   • DTo encrypt all data stored in Microsoft 365.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company has a large volume of unstructured data in SharePoint and OneDrive. They want to identify which documents contain personal data (e.g., email addresses) and apply a 'Personal Data' label. However, they are concerned about the performance impact of scanning all data at once. What should they do?

   • AUse a data classification scan with a sensitive info type for email addresses and configure auto-labeling to run in simulation mode first.
   • BUse a DLP policy to block all documents containing email addresses.
   • CUse Insider Risk Management to identify users who access personal data.
   • DApply a manual label to all documents and then run a search to find personal data.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the role of sensitive information types in Microsoft Purview data classification?

   • AThey encrypt data at rest.
   • BThey specify how long data should be retained.
   • CThey define patterns that help identify specific types of sensitive data, such as credit card numbers.
   • DThey determine which users can access a file.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the main purpose of Microsoft Purview Communication Compliance?

   • ATo prevent data loss by blocking sensitive information in emails.
   • BTo manage the retention of communications for legal hold purposes.
   • CTo monitor communications for policy violations and ensure adherence to regulatory and organizational standards.
   • DTo detect insider threats by analyzing user behavior patterns.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is deploying Copilot and wants to ensure that sensitive data from a specific project site is not used in AI responses. However, they also want to allow Copilot to use data from other sites to increase productivity. The company wants to balance security and productivity. What should they do?

   • AUse Purview DSPM for AI to assess data sensitivity and apply controls to the specific site, while allowing other sites
   • BBlock Copilot access to all SharePoint sites to ensure security
   • CUse a retention policy to delete sensitive data from the project site
   • DUse a DLP policy that blocks all Copilot interactions
   Reveal Solution Discussion Select an answer first