Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 3 question 77 discussion

Actual exam question from Microsoft's MS-101

Question #: 77
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a new Microsoft 365 subscription.
You need to prevent users from sending email messages that contain Personally Identifiable Information (PII).
Solution: From the Azure portal, you create a Microsoft Azure Information Protection label and an Azure Information Protection policy.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by Dylan at Feb. 17, 2020, 4:14 p.m.

Comments

Submit Cancel

moh15

Highly Voted 5 years, 2 months ago

from dlp policy in compliance and security

upvoted 13 times

...

diggity801

Highly Voted 5 years, 2 months ago

I checked and you can't prevent from sending with AIP label + policy. The answer is no.

upvoted 8 times

...

ercluff

Most Recent 3 years, 3 months ago

As of 8/31/2021, efforts to create DLP in Exchange Admin center are redirected to M365 Compliance Center. Currently, the only place to create a data loss prevention policy is through the M365 Compliance admin center (now known as the Microsoft 365 Compliance Center) where you can create a single DLP policy to help protect content in SharePoint, OneDrive, Exchange, Teams, and now Endpoint Devices. Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/how-dlp-works-between-admin-centers?view=o365-worldwide

upvoted 1 times

ercluff

3 years, 3 months ago

“ . . .the Azure Information Protection classic client and Label Management in the Azure Portal are deprecated as of March 31, 2021. No further support is provided for the classic client and maintenance versions will no longer be released. The classic client will be officially retired, and will stop functioning, on March 31, 2022. All current Azure Information Protection classic client customers must migrate to the Microsoft Information Protection unified labeling platform and upgrade to the unified labeling client. Learn more in our migration blog. (Reference: https://docs.microsoft.com/en-us/azure/information-protection/aip-classification-and-protection )

upvoted 1 times

...

lucidgreen

3 years, 11 months ago

The policy wouldn't stop information or documents to be sent. But if an attached document did have the label, it would prevent it from being opened.

upvoted 2 times

lucidgreen

3 years, 11 months ago

If you're asking yourself, "Why the redundancy?" This is why. You should employ both, but they have very different outcomes.

upvoted 2 times

...

Dylan

5 years, 3 months ago

Would an AIP label and policy not achieve the goal? I think it would

upvoted 4 times

hitten_za

5 years, 3 months ago

I don't think AIP can outright prevent the email from being sent. It can only protect the attachment and encrypt the email. The recipient would still receive it. Needs confirmation though.

upvoted 5 times

Jacques2108

4 years, 1 month ago

Agreed with hitten_za! AIP can't restrict an email from being sent. Only encrypt it. Copied from previous questions comment: "You can still create DLP in Classic EAC, tested now 03. April 2021. You can create DLP in Classic EAC still but not in New EAC as functionality is moved to S&C center - You can now create a single DLP policy in the Office 365 Security & Compliance Center to protect content in SharePoint, OneDrive, and Exchange" With S&C you can prevent the email from being sent or until completed removed the old EAC. :)

upvoted 1 times

...

JamieWilson

4 years, 6 months ago

Possibly but you can still email an AIP doc

upvoted 1 times

...