Exam MS-101 topic 3 question 25 discussion

You can open an app from app1,2 or 3 as it is in silent mode. This will only log, not alert or block user. Log will be generated on app 3 only.

On test taken 5.10.21

Still valid, on exam Jun 25, 2022

Answer as given is correct: Open File 1 from: App1 and App2 Only Log action: App3 only Running in silent mode will still block App3 from accessing corporate data, but will all the configured APP1 and the exempt APP2. App3 is the only one violating the WIP policy, so it would have an entry logged as well as being blocked. WIP runs silently, logging inappropriate data sharing, without blocking anything that would have been prompted for employee interaction while in Allow Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped. https://docs.microsoft.com/en-us/mem/intune/apps/windows-information-protection-policy-create?WT.mc_id=Portal-Microsoft_Intune#silent

"When you first start with Windows Information Protection and don’t know if the recommended apps will be enough, consider starting with the Protection Mode set to Silent. Because in silent mode WIP will not block any action but will log inappropriate data sharing, giving you the opportunity to monitor your WIP enabled apps but also apps you did not add to your WIP policy." https://allthingscloud.blog/windows-information-protection-with-enrollment/

Second selection kinda gives away the first. If you could not open it with App1, App2, and App3, it couldn't be logged. . . (test question logic?)

The following answers are correct ~

Can open from App1 & App2 only! "Silent WIP runs silently, logging inappropriate data sharing, without blocking anything that would’ve been prompted for employee interaction while in Allow Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped." https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure#manage-the-wip-protection-mode-for-your-enterprise-data

App1 App2 and App3 App3 https://www.examtopics.com/exams/microsoft/ms-100/view/7/

I think the answer is correct as there is no mention if Allow Override mode is on: Silent WIP runs silently, logging inappropriate data sharing, without blocking anything that would’ve been prompted for employee interaction while in Allow Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped.

Silent mode: open with app1&2&3 Log only excempt: 3