MS-102 Question #397: Real Exam Question with Answer & Explanation

Question

You have a Microsoft 365 subscription. You need to configure a compliance solution that meets the following requirements: - Defines sensitive data based on existing data samples. - Automatically prevents data that matches the samples from being shared externally in Microsoft SharePoint Online or email messages. Which two components should you configure? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

• Aa trainable classifier
• Ba sensitive info type
• Can adaptive policy scope
• Da data loss prevention (DLP) policy
• Ean insider risk policy

Explanation

The requirement has two parts: (1) define sensitive data based on existing data samples, and (2) automatically prevent that data from being shared externally. A custom Sensitive Info Type (B) - specifically using Exact Data Match (EDM) - allows you to fingerprint actual data samples (e.g., a database of employee IDs or customer records) to identify matching content. A Data Loss Prevention (DLP) policy (D) then uses that sensitive info type as a condition to automatically block external sharing via SharePoint Online and email. A trainable classifier (A) uses ML to categorize content broadly, not fingerprint specific data samples. An adaptive policy scope (C) controls who a policy applies to, not what it detects. An insider risk policy (E) monitors risky user behavior, not content sharing.

No community discussion yet for this question.