Understand Microsoft Purview AB-900 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A law firm uses Microsoft 365 and wants to automatically protect email attachments containing client names and passport numbers. The firm's compliance team needs to see which documents are affected without manually opening each file. What should the firm configure in Microsoft Purview?

   • AA retention policy that deletes emails after 30 days
   • BA communication compliance policy that scans Teams messages
   • CAn insider risk policy that alerts on external email sharing
   • DA sensitivity label with auto-labeling for sensitive info types, plus a content explorer view
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of Microsoft Purview Information Protection?

   • ATo monitor employee communications for policy violations and inappropriate language.
   • BTo detect and block the unauthorized transmission of sensitive data outside the organization.
   • CTo classify and protect sensitive data by applying labels, encryption, and usage restrictions across documents and emails.
   • DTo automatically delete data that is no longer needed based on retention rules.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A government agency must keep all email communications for 7 years, but wants to allow users to delete emails before that if they are not needed. The agency also wants to ensure that deleted emails are recoverable for the full 7 years. What should they configure?

   • AA DLP policy that blocks email deletion
   • BA retention policy that retains email for 7 years, with the ability for users to delete but the content is preserved in a recoverable state
   • CA sensitivity label that marks all email as 'Government'
   • DAn insider risk policy that alerts on email deletion
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An organization wants to automatically identify documents containing credit card numbers and apply a 'Financial' label. They also want to see a dashboard of where these documents are stored across SharePoint and OneDrive. What should they use in Microsoft Purview?

   • ASensitive info types with auto-labeling and Content Explorer
   • BInsider Risk Management and Audit logs
   • CRetention policies and Data Lifecycle Management
   • DData Loss Prevention policies and Activity Explorer
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A multinational company has a DLP policy that blocks sharing of documents containing passport numbers. However, the policy is also blocking legitimate sharing of documents that contain passport numbers in a non-sensitive context, such as a list of expired passports. The compliance team wants to reduce false positives without weakening protection for actual sensitive data. What should they do?

   • ACreate a custom sensitive info type that requires additional evidence, such as a passport number format and a nearby keyword like 'Passport', and update the DLP policy to use it.
   • BDisable the DLP policy and rely on user training to avoid sharing passport numbers.
   • CChange the DLP policy to only alert, not block, on passport numbers.
   • DApply a sensitivity label to all documents containing passport numbers and use that label in the DLP policy.
   Reveal Solution Discussion Select an answer first