Exam MS-102 topic 1 question 212 discussion

txt file is in scope don't get confused with sentitifity label see https://learn.microsoft.com/en-gb/exchange/security-and-compliance/mail-flow-rules/inspect-message-attachments Answer is 4 and 0

The explanation is: When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced. For example, if content matches all of the following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule: Rule 1: only notifies users Rule 2: notifies users, restricts access, and allows user overrides Rule 3: notifies users, restricts access, and doesn't allow user overrides Rule 4: restricts access Rules 1, 2, and 4 would be evaluated, but not applied. In this example, matches for all of the rules are recorded in the audit logs and shown in the DLP reports, even though only the most restrictive rule is applied. So because the most restrictive rule, I think : User1--> 4 User2--> 3

See prioritet User1 only get 1 notifiering User 2 get 1 notifiering becuase of flood notifiering and priority user1 only get one mail

Answer User1 : 4 User2 : 0 Here higher priority applies and it prevents other rules with lower priority. File1.xlsx is copied Only Rule2 is triggered No priority applied User1 Receives a notification File2.doc is copied Rule2 and Rule3 are triggered Rule2 has priority User1 Receives a notification File3.pptx is copied Rule1, Rule2 and Rule3 are triggered Rule1 has priority User1 Receives a notification File4.txt is copied Rule1, Rule2 and Rule3 are triggered Rule1 has priority User1 Receives a notification .txt is supported : https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about

My selection 2 notification for user1 1 notification for user2 here is the scenario Rule1 and Rule2 is for user1 Rule1 high priority is not matching on File1 for user1 (no alert) Rule2 second priority is matching on File2 for user1 (alert) Rule1 high priority is matching on File2 for use1 (alert) file3 and file4 is not processed since high priority rule is already matched 2 alert for user2 Rule3 is for user2 3 or more is matching for file2 = priority2 priority 2 is already matched for file2, hence no more notification applicable

To prevent a flood of notification emails, all matches that occur within a one-minute time window that are for the same DLP rule and on the same location are grouped together in the same alert. Each rule launch a notification. For this reason user1 receive 2 notifications (Rule1 and Rule2) and user2 1 notification (Rule 3). Answer is 2, 1

I would go for: User1: 4 User2: 0

so basically no one knows !!

- 4 - 0

https://learn.microsoft.com/en-us/purview/dlp-policy-reference

https://learn.microsoft.com/en-us/purview/dlp-policy-reference

- 2 - 1

Rule priority order When an item matches multiple rules in a policy and those rules have identical actions, the actions from the highest priority rule is applied. According to the rule priority , I think User 1 - 4 , User 2 - 0 should be right? Ref: https://learn.microsoft.com/en-us/purview/dlp-policy-reference

I tested it in my tenant demo, Box 1: I got 15 notifications to user1 mailbox, the answer is not there Box 2: I got 8 notifications to user2 mailbox, I got with 8. Why this is happening, No idea, this question was difficult to answer, that is why I created the DLP to see the results but, unfortunately, it is not clear. Sorry team, I will just choose this one to 8-8 but in this case, it is guessing because I believe even Microsoft doesn't know.

User1 = 4. All file types are now supported. https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about#files-monitored-via-policy User2 = 0. Agree with Paul_white about the ranking.

PERSONALLY I WILL GOT WITH USER1 = 3, AND USER 2 = 0. THE RANKING SAYS IT ALL https://www.examtopics.com/discussions/microsoft/view/67917-exam-ms-101-topic-3-question-107-discussion/

5 and 2 from ms 101 Reference: https://docs.microsoft.com/en-gb/exchange/security-and-compliance/mail-flow-rules/inspect-message-attachments