Question 890 A classified file is encrypted with a label, but policy also requires blocking the upload of that file to an unsanctioned service. What control gap remains? Adding another Exchange accepted domain Strengthen the file's sensitivity label encryption permissions and assume that every upload destination is automatically blocked A retention policy that keeps the file ten years A relevant DLP or session/access policy for the destination and transfer channel Explanation Correct Answer D:File classification/encryption and movement prevention address different risks. Incorrect Answers A:Mail domains cannot govern an external SaaS upload. B:Encryption protects readable content but does not necessarily prevent the transfer action to an unsanctioned cloud app; DLP/session controls address the channel. C:Preservation does not necessarily prevent unauthorized upload.
Question 891 A data owner wants to see where documents matching sensitive information types are located, not simply count label-change actions. Which Purview experience is best? The service health incident timeline The Exchange Online mail flow connector list Content explorer with appropriately scoped roles and data views Activity explorer alone as a full inventory of file locations Explanation Correct Answer C:Content explorer supports investigation of classified content locations and categories. Incorrect Answers A:Availability advisories are unrelated to content classification inventory. B:Transport connectors do not show classified SharePoint file locations. D:Activity explorer focuses on events rather than replacing a content inventory.
Question 892 Compliance wants to examine which users applied or downgraded sensitivity labels yesterday. Which data surface is most relevant? The on-premises DNS zone change history The tenant's billing usage summary Content explorer with no event filters Purview Activity explorer for supported labeling activities Explanation Correct Answer D:Activity explorer provides action-oriented evidence for labeling events. Incorrect Answers A:DNS records do not log Purview label operations. B:Billing counts cannot identify label downgrade actions. C:Inventory views are not the same as a chronological user action record.
Question 893 An analyst can see aggregate classified-file counts but cannot open sensitive item details. What should security review? Whether the analyst has the specific Content explorer permissions for detailed data and the approved investigation need Whether the analyst is the oldest tenant user Whether a retention policy is set to Forever Whether the analyst can change a shared mailbox display name Explanation Correct Answer A:Aggregate access does not imply authority to view sensitive file contents. Incorrect Answers B:Account age does not grant content-level investigative permissions. C:Retention duration is independent of reader permissions. D:Mailbox name rights do not authorize Purview content inspection.
Question 894 The security team publishes a new sensitivity label and wants to detect whether it is actually being applied across workloads. What evidence fits? Label usage reporting and supported activity events over a defined reporting interval The count of DNS verification TXT values The number of assigned Global Administrators Total tenant storage quota without breakdown Explanation Correct Answer A:Published configuration does not prove user or automatic adoption. Incorrect Answers B:Domain ownership records do not represent file classification activity. C:Admin role count does not show how often a label was applied. D:Capacity alone cannot measure label assignment.
Question 895 Some newly targeted users cannot see a sensitivity label shortly after policy publication while colleagues can. What should be checked before recreating the label? Turn off the organizational DLP rules Delete the label and replace it with a public link Change every affected user's email alias Policy audience, app/client support and expected distribution propagation Explanation Correct Answer D:Scoping and propagation can account for staggered label availability. Incorrect Answers A:DLP disabling cannot repair a missing label deployment. B:Deleting classification does not validate policy targeting. C:Aliases do not normally determine the label publishing scope.
Question 896 A records policy requires customer agreements to be retained for seven years after they become records, even if users try to delete them. Which Purview capability applies? A Cloud Apps sanctioned flag for the storage platform A retention label or policy with the appropriate retain action and time basis A sensitivity label that only displays Confidential as a header An Exchange phishing quarantine period Explanation Correct Answer B:Retention can preserve eligible content independently of ordinary user deletion attempts. Incorrect Answers A:App approval does not preserve records through user deletion. C:Visual markings do not define a seven-year lifecycle rule. D:Email threat quarantine is not a document records retention program.
Question 897 Legal must apply different retention periods to invoices and contracts in the same SharePoint site. What configuration best expresses content-specific periods? Distinct retention labels applied to the appropriate item categories One site-wide retention policy using a single fixed duration for everything One sensitivity label per employee job title One Microsoft 365 Backup policy with a restore interval Explanation Correct Answer A:Item-level labels can express different schedules for different records in one location. Incorrect Answers B:A single duration does not distinguish invoices from contracts. C:Job-title classification does not establish document-specific retention schedules. D:Operational backup is not a substitute for distinct records schedules.
Question 898 An employee deletes a document one year after creation, but an applicable Purview retention policy requires five years. What should be expected? A sensitivity label on the file automatically removes the five-year requirement The deletion immediately reduces the retention period to one year The user can permanently bypass all retention by emptying the recycle bin The service retains eligible content for the required period despite the user's deletion action Explanation Correct Answer D:Retention preservation takes precedence over ordinary user deletion for covered content. Incorrect Answers A:Classification alone does not cancel Purview retention. B:User action does not shorten a mandated policy duration. C:A covered item may remain preserved outside ordinary user-visible folders.
Question 899 A preserved SharePoint document is no longer visible in the original library. What distinction should administrators explain? Retention can maintain preserved content for compliance even when the user-facing item was deleted; it is not identical to backup restore A retained item must always remain visible in the original folder until expiration A backup policy is mandatory to make any retention rule valid The item is necessarily permanently destroyed once absent from the original library Explanation Correct Answer A:Preservation and operational point-in-time recovery have different objectives. Incorrect Answers B:User-visible deletion can occur while preservation continues. C:Retention capabilities do not always require Microsoft 365 Backup. D:Its disappearance does not prove compliance copies were purged.
Question 900 A department wants employees to classify completed contracts as records while leaving drafts subject to a different schedule. What is an appropriate implementation? Automatically mark all files with a sensitivity label called Final Give every contract draft a tenant-wide Global Administrator permission Change document MIME types to force a different retention policy Publish an applicable retention label for final contracts and define the record-setting behavior Explanation Correct Answer D:Item-specific labeling separates final record content from draft lifecycle needs. Incorrect Answers A:A sensitivity label alone does not declare a records-management record. B:Admin privileges do not establish records status. C:File formats do not reliably express record declaration intent.
