Microsoft 365 Administrator Expert MS-102 Practice Question
Your organization manages Windows 10 endpoints that are already onboarded to Microsoft Defender for Endpoint. You must stop users from copying files that contain the Azure Secret Key sensitive information type to USB drives. However, users should be able to proceed after providing a business justification. The rule must not affect files copied to corporate network shares. In a Microsoft Purview data loss prevention (DLP) policy, which configuration satisfies the requirement?
Select the Devices location and configure both Copy to removable storage and Copy to network share activities with the action Block (no override).
Select SharePoint and OneDrive for Business locations and set the action Restrict access to the content with user override.
Select the Exchange email location and configure Send email with attachments and Copy to removable storage activities with Block with override.
Select the Devices location, configure the activity Copy to removable storage, and set the action to Block with override while requiring a business justification; leave Copy to network share unconfigured.
To meet the requirement you must build an Endpoint DLP rule that targets only the Devices location. Within the rule's advanced settings, you select the activity Copy to removable storage and set the action to Block with override while also requiring users to enter a business justification. Because the activity Copy to network share is not selected, the rule never triggers when files are moved to corporate shares, ensuring the policy applies only to USB exfiltration. Choosing SharePoint, Exchange, or a pure Block action without override would fail either to scope the location correctly or to give users the required ability to proceed with justification.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Endpoint DLP in Microsoft Purview?
Open an interactive chat with Bash
How does 'Block with override' work in DLP policies?
Open an interactive chat with Bash
What is Azure Secret Key sensitive information type?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Manage compliance by using Microsoft Purview
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .