Exam MS-102 topic 1 question 208 discussion

A, B IS THE RIGHT ANSWER

F. Étiquette de sensibilité ✅ Peut être appliquée à un site SharePoint (via MIP + Entra) Permet de restreindre le partage externe, de chiffrer, ou d’appliquer des règles de confidentialité Peut empêcher le partage de contenu avec des utilisateurs externes pas la B : empêche la fuite d’informations sensibles, mais ne bloque pas le partage global d’un site

AF A. a retention policy - to retain all data for 10 years. F. a sensitivity label - to prevent sharing data outside the organization. Explanation Retention Policy: A retention policy allows you to specify how long data should be retained. In this case, setting a 10-year retention policy will ensure that all data on site1 is retained for the specified period. Sensitivity Label: Sensitivity labels can be configured with settings to control data access and sharing, such as preventing content from being shared externally. Applying a sensitivity label that restricts external sharing will help you meet the requirement of preventing data from being shared outside the organization. Why not B ? While DLP policies can prevent the sharing of sensitive data, they’re generally used for specific types of data, not for enforcing retention or general sharing restrictions at the site level.

AB, correct

Only think I doubt about is that a retention policy is for the whole sharepoint environment instead of just one site

A and B is correct

I think it is AB because yes, you can use a sensitivity label for your DLP policy, but the labels themselves won't do anything in this scenario, the DLP policy prevents content from being shared externally.

Answer: A and B Retains all data for 10 years: Retention Policy Prevents the sharing of data outside the organization: DLP Policy For all A + F Persons: you dont need a sensitiv label for DLP + SharePoint and you ignore the "Retains all data for 10 years" requirement. New DLP Policy -> Only SharePoint (maybe specific site) -> Condition: Content is shared for M365 (Detects when content is sent in email message, Teams chat or channel message, or shared in a SharePoint or OneDrive document.) -> Action: Block access

I choose DLP create a retention label Because you might have the retention label before making a label policy. You make a label policy by publishing a label.

AB is correct

Would be ABF if that was an option. Need a retention policy obviously for 10 yr requirement obviously, but you should create a DLP policy that looks at sensitivity labels to determine if a file should be shared externally. However sensitivity labels alone won't stop sharing without a DLP policy in place to act on them. https://microsoft.github.io/ComplianceCxE/notes/mip-dlp/DLP-policy-externalshare/

AB for sure

1. Retention Policy 2. Sensitivity Label https://techcommunity.microsoft.com/t5/microsoft-365/sensitivity-labels-control-external-sharing-for-sharepoint/m-p/1970242