ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-102 All Questions

View all questions & answers for the MS-102 exam
Go to Exam

Exam MS-102 topic 1 question 96 discussion

Actual exam question from Microsoft's MS-102
Question #: 96
Topic #: 1
[All MS-102 Questions]

HOTSPOT -
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint site named Site1 and a data loss prevention (DLP) policy named DLP1. DLP1 contains the rules shown in the following table.

Site1 contains the files shown in the following table.

Which policy tips are shown for each file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by Greatone1 at Aug. 20, 2023, 9:16 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
hogehogehoge
Highly Voted 1 year, 8 months ago
File1.docx:rule2 only. And File2.docx:rule4 only. When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced. For example, if content matches all of the following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule: https://learn.microsoft.com/en-us/purview/dlp-policy-reference
upvoted 58 times
004b54b
1 month, 1 week ago
https://learn.microsoft.com/en-us/purview/dlp-policy-reference#the-priority-by-which-rules-are-evaluated-and-applied
upvoted 2 times
...
blairskimo
10 months ago
This is correct . I looked at the doc 'When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced. For example, if content matches all of the following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule: Rule 1: only notifies users Rule 2: notifies users, restricts access, and allows user overrides Rule 3: notifies users, restricts access, and doesn't allow user overrides Rule 4: restricts access Rules 1, 2, and 4 would be evaluated, but not applied. In this example, matches for all of the rules are recorded in the audit logs and shown in the DLP reports, even though only the most restrictive rule is applied." so I dont know how they rule 1 for both
upvoted 3 times
...
martinods
11 months, 2 weeks ago
why not File1.docx:rule3 only. rule 3 is most restrictive than rule 2, no ?
upvoted 2 times
blairskimo
10 months ago
rule 3 enables user over rides while rule 2 disables them there for more restrictive .
upvoted 1 times
...
...
...
f09257a
Highly Voted 1 year, 2 months ago
Rule 1 for both, when multiple rules matches, the rule with the higher priority is enabled.
upvoted 6 times
...
skids222
Most Recent 3 weeks, 3 days ago
Warning to all: This is where the "Reveal solution" answers become extremely unreliable. Don't take them at face value.
upvoted 1 times
...
Frank9020
6 months, 1 week ago
File1.docx is Rule 2 File2.docx is Rule 4
upvoted 3 times
...
APK1
8 months, 3 weeks ago
Same question in the MS practice lab. Rule 1 for both, when multiple rules matches, the rule with the higher priority is enabled.
upvoted 4 times
...
9711d59
1 year, 3 months ago
When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced. For example, if content matches all of the following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule: Rule 1: only notifies users Rule 2: notifies users, restricts access, and allows user overrides Rule 3: notifies users, restricts access, and doesn't allow user overrides Rule 4: restricts access
upvoted 3 times
...
KairKnows
1 year, 5 months ago
Hoge is correct. "Only the policy tip from the highest priority, most restrictive rule will be shown. For example, a policy tip from a rule that blocks access to content will be shown over a policy tip from a rule that simply sends a notification. This prevents people from seeing a cascade of policy tips."
upvoted 3 times
...
NrdAlrt
1 year, 6 months ago
Tips follow rules applied and are not cumulative as that would be confusing. DLP rules are applied as one with most restrictive actions over priority unless the policies are the actions are the same in terms of restrictions. File 1 : Rule 2 only, File 2 : Rule 4 only
upvoted 1 times
...
rfree
1 year, 6 months ago
Correction, Rule 2 then Rule 4 as each is the Most Restrictive.
upvoted 1 times
...
rfree
1 year, 6 months ago
Confusing, now thinking Rule 2, then Rule 3. It's possible for content to match several rules in a DLP policy or several different DLP policies, but only the policy tip from the most restrictive, highest-priority rule will be shown (including policies in Test mode). For example, a policy tip from a rule that blocks access to content will be shown over a policy tip from a rule that simply sends a notification. https://learn.microsoft.com/en-us/purview/use-notifications-and-policy-tips
upvoted 1 times
...
rfree
1 year, 7 months ago
As its not asking which rules are applied, but which rules are Shown.
upvoted 1 times
...
rfree
1 year, 7 months ago
Great catch Hoge3x, but the very next paragraph states" Rules 1, 2, and 4 would be evaluated, but not applied. In this example, matches for all of the rules are recorded in the audit logs and shown in the DLP reports, even though only the most restrictive rule is applied." So reading the question again "Which tips are SHOWN", I believe its all for each. File1 rule 1,2 and 3. File 2 rule 1,3 and 4
upvoted 3 times
...
amurp35
1 year, 7 months ago
Agree with hoge
upvoted 1 times
...
letters1234
1 year, 8 months ago
Agree with Hoge, specific reference in the doc: https://learn.microsoft.com/en-us/purview/dlp-policy-reference#the-priority-by-which-rules-are-evaluated-and-applied
upvoted 4 times
...
Greatone1
1 year, 8 months ago
Rule 1 Tip Only" for both
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago