nerdexam
Microsoft

MS-102 · Question #528

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. No, an access policy in Defender for Cloud Apps is designed to control app access or session redirection, not to prevent specific content like PII from being sent in email messages.

Submitted by lars.no· Apr 18, 2026Manage compliance by using Microsoft Purview

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a new Microsoft 365 subscription. You need to prevent users from sending email messages that contain Personally Identifiable Information (PII). Solution: From the Defender for Cloud Apps admin center, you create an access policy. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(22 responses)
  • A
    45% (10)
  • B
    55% (12)

Why each option

No, an access policy in Defender for Cloud Apps is designed to control app access or session redirection, not to prevent specific content like PII from being sent in email messages.

AYes

An access policy in Defender for Cloud Apps controls user access to applications, but it does not scan the content of emails for sensitive information like PII to prevent it from being sent. This task requires a Data Loss Prevention (DLP) policy.

BNoCorrect

An access policy in Microsoft Defender for Cloud Apps focuses on controlling access to cloud applications based on various conditions, or redirecting sessions for deeper inspection. It is not designed to scan email content for PII and prevent its transmission; that functionality is provided by Data Loss Prevention (DLP) policies within Microsoft Purview.

Concept tested: Defender for Cloud Apps vs. DLP functionality

Source: https://learn.microsoft.com/en-us/purview/dlp-learn-about

Topics

#DLP policies#Email security#PII protection#Cloud Apps

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice