Crucial Exams

Microsoft 365 Administrator Expert MS-102 Practice Question

You manage Microsoft Purview in a tenant that has Endpoint DLP onboarded Windows 10/11 devices. A sensitivity label named Highly Confidential - Finance is auto-applied to any Excel file that contains credit card numbers. Management wants to block users from printing these labeled files, but allow members of the Azure AD group Finance Managers to print after entering a business justification. Which single DLP configuration satisfies the requirement with the least number of rules?

  • Mark all corporate printers as unallowed applications in Endpoint DLP device settings and set the global Printing restriction to Block without override.

  • Create a DLP policy targeting SharePoint and OneDrive with the Credit Card Number sensitive information type and configure the action Block with override.

  • Create an Endpoint DLP policy rule scoped to Windows devices that uses the condition "Sensitivity label is Highly Confidential - Finance", sets the Print restriction to Block with override, and adds the Finance Managers group as an exception.

  • Edit the Highly Confidential - Finance sensitivity label and enable the Mandatory labeling setting Require justification to remove the label.

Microsoft 365 Administrator Expert MS-102
Manage compliance by using Microsoft Purview
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot