ExamworthyExamworthy
Open the appStart free

MS-102 - Manage Compliance by Using Microsoft Purview - Section 4.2

Implement Microsoft Purview data loss prevention policies to protect sensitive information.

Design and deploy Microsoft Purview DLP policies using built-in and custom sensitive information types to prevent unauthorised sharing of confidential data. Recognise when endpoint DLP extends protection to managed devices and how policy tips notify users before a violation occurs.

DLP policiessensitive information typesDLP alertsendpoint DLPpolicy tips

Practice question for this objective

Free sampleManage Compliance by Using Microsoft Purviewmedium

A Microsoft Purview administrator wants to deploy a new DLP policy that gathers audit data across all targeted locations so the team can review what would have been blocked - WITHOUT notifying users, showing policy tips, or actually blocking any activity. Which DLP policy state matches this requirement?

  • ATurn it on right away with the configured actions
  • BKeep it off
  • CRun the policy in simulation mode and show policy tips while in simulation mode
  • DRun the policy in simulation mode (without policy tips) Correct
"Simulation mode without policy tips" is the audit-only / no-user-visibility state; "with policy tips" is for pilot training; "on" is enforcement; "off" is dormant. Simulation mode (without policy tips) is the documented Microsoft Purview DLP state for collecting audit data across the configured locations while the policy is NOT enforced and users see NO notifications. The DLP engine evaluates the rules and writes events as if the policy were on, so the admin can see what would have been blocked without any user-visible impact.

Why A is wrong: Turning the policy on right away enforces the configured actions (block, notify, etc.) - it does not match "no notifications, no blocking".

Why B is wrong: Keeping the policy off generates no audit data at all; nothing is evaluated.

Why C is wrong: Simulation mode WITH policy tips evaluates the rules without enforcement but DOES display tips to users, which violates the stated "no notification" requirement.

Why D is correct: Correct. Simulation mode (without policy tips) is the documented Microsoft Purview DLP state for collecting audit data across the configured locations while the policy is NOT enforced and users see NO notifications.

See more MS-102 practice questions, answers explained.

More in this domain

Back to all Manage Compliance by Using Microsoft Purview objectives, or the MS-102 cert hub.

Examworthy is not affiliated with or endorsed by Microsoft. Original, blueprint-aligned practice material only.