Implement Microsoft Purview Data Loss Prevention (DLP) MS-102 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company has DLP policies for SharePoint Online and OneDrive. The compliance team notices that the DLP reports show a high number of matches in OneDrive but very few in SharePoint. They suspect the SharePoint policy is not working correctly. What should you do first to troubleshoot?

   • ACheck the audit log for SharePoint sharing events.
   • BReview the DLP policy configuration for SharePoint to ensure the correct sensitive info types and locations are selected.
   • CIncrease the sensitivity label applied to SharePoint documents.
   • DDisable the OneDrive policy to see if SharePoint matches increase.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   Your organization stores contracts with bank account numbers in SharePoint Online document libraries. The DLP policy is set to 'Block' external sharing. A user reports that they cannot share a document externally, but they need to send it to a partner. What should you do to allow this specific sharing while maintaining protection?

   • ARemove the document from the library and email it to the partner directly.
   • BAdd the partner as a guest user in Azure AD and grant them direct access to the document.
   • CInstruct the user to use the 'Override' option in the DLP policy if it is configured to allow overrides with justification.
   • DTemporarily disable the DLP policy, share the document, then re-enable it.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   Contoso's compliance team must prevent credit card numbers from being sent in email or shared in Teams chats. They want a single policy that covers both workloads and will notify users when they attempt to share the data. What should you configure?

   • ACreate a DLP policy for Exchange only and rely on Teams' built-in compliance features to block credit card numbers.
   • BCreate two separate DLP policies: one for Exchange and one for Teams, each with its own notification action.
   • CCreate one DLP policy in the Microsoft Purview compliance portal that includes Exchange and Teams locations, with a user notification action.
   • DConfigure a mail flow rule in Exchange to block credit card numbers and a separate Teams retention policy for chat messages.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   You are analyzing DLP events and notice that a policy for Exchange Online has a high number of matches, but the matches are all from a single user who frequently sends emails with sensitive data to external recipients. The emails are being blocked, but the user is complaining about productivity loss. You need to balance protection and productivity. What should you do?

   • AIncrease the sensitivity threshold to reduce the number of matches.
   • BReview the DLP events to understand the context and then adjust the policy to allow overrides with justification for this user.
   • CDisable the DLP policy for this user to improve productivity.
   • DCreate a new DLP policy that excludes this user's mailbox.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   Your organization has a DLP policy for OneDrive for Business that blocks external sharing of files containing personal data. A user needs to share a file with an external partner for a legitimate business purpose. The user is unable to override the block. You need to allow this sharing while maintaining compliance. What should you do?

   • AEdit the DLP policy to allow overrides with justification for this sensitive info type.
   • BTemporarily disable the DLP policy, share the file, then re-enable it.
   • CHave the user send the file via email instead, since email DLP is separate.
   • DCreate a new DLP policy that excludes the user's OneDrive from the block.
   Reveal Solution Discussion Select an answer first