Microsoft 365 Administrator Expert MS-102 Practice Question
You manage Microsoft Purview Endpoint DLP for Contoso. A published policy is configured to block the activity "Upload to cloud services" for files that carry the Confidential sensitivity label. During testing, users can still upload these files to https://www.dropbox.com/ from any browser, while uploads to OneDrive are already allowed. You must ensure the policy blocks uploads to personal Dropbox accounts without affecting sanctioned services such as OneDrive or the company-owned Dropbox Business tenant. What should you do?
Add dropbox.exe to the Unallowed applications list so that the policy blocks the Dropbox client.
Turn on Advanced classification scanning for Endpoint DLP in the Microsoft Purview compliance portal.
Add dropbox.com to the Unallowed cloud service domains list in Endpoint DLP settings.
Edit the policy rule and specify Dropbox as the service domain in the condition.
Endpoint DLP only enforces "Upload to cloud services" actions against domains that are defined as unsanctioned. By default, most domains are considered sanctioned, so the policy will audit rather than block unless a domain is explicitly listed as unallowed. Adding dropbox.com to the Unallowed cloud service domains list marks personal Dropbox as an unsanctioned destination, allowing the existing policy rule to block uploads while leaving other services (for example, OneDrive and a company-specific Dropbox Business domain) unaffected. Listing the Dropbox executable does not cover browser-based uploads, changing the rule's action does not change the sanctioned status of the domain, and enabling advanced classification has no impact on domain filtering.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Purview Endpoint DLP?
Open an interactive chat with Bash
What is the Unallowed cloud service domains list in Endpoint DLP settings?
Open an interactive chat with Bash
How does Endpoint DLP handle sanctioned and unsanctioned domains?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Manage compliance by using Microsoft Purview
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .