Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 3 question 16 discussion

Actual exam question from Microsoft's MS-500

Question #: 16
Topic #: 3

HOTSPOT -
You have a Microsoft 365 subscription.
You identify the following data loss prevention (DLP) requirements:
✑ Send notifications to users if they attempt to send attachments that contain an EU Social Security Number (SSN) or Equivalent ID.
✑ Prevent any email messages that contain credit card numbers from being sent outside your organization.
✑ Block the external sharing of Microsoft OneDrive content that contains EU passport numbers.
✑ Send administrators email alerts if any rule matches occur.
What is the minimum number of DLP policies and rules you must create to meet the requirements? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

by kiketxu at March 15, 2021, 10:17 p.m.

Comments

Submit Cancel

kiketxu

Highly Voted 4 years, 2 months ago

POLICY1 with Exchange selected as location. Rule (A) with: - EU social security - NOTIFY the user who sent - Notify Admin. Rule (B) with: - Credit card numbers - BLOCK - Notify Admin. POLICY2 with OneDrive selected as location. Rule (C) with: - EU passport numbers - BLOCK - Notify Admin. Credits to @itmp in: https://www.examtopics.com/discussions/microsoft/view/12036-exam-ms-500-topic-3-question-3-discussion/

upvoted 34 times

Yetijo

3 years, 11 months ago

Created these polies & rules in lab. This is correct, 2 policies, 3 rules as described.

upvoted 5 times

...

BialyFenek

4 years, 2 months ago

Correct, answer is 2 policies and 3 rules

upvoted 7 times

vijeet

4 years, 2 months ago

How about teams?

upvoted 3 times

Cepheid

3 years, 6 months ago

What about Teams? It's not mentioned in the question.

upvoted 1 times

mbecile

3 years, 4 months ago

You can send attachments with Teams, so Teams should be included.

upvoted 2 times

...

hyve

Highly Voted 3 years, 7 months ago

Policies are made up of one or more rules. Common protection requirements should be grouped in the same policy. Because different requirements must be met, a separate policy should be defined for each, Block, Notify users, Prevent. No separate rule or policy is needed for admin notification. I'll go with 3 and 3

upvoted 6 times

...

Dzuljzebari

Most Recent 2 years, 3 months ago

3 policies and 3 rules is correct. You can't ignore Teams as this is location what you select when creating policy. Hypothetical user would be very upset if user would get notification when sending credit card details in Teams chat as attachment inside organization. According to requirement warning should only come if Social security number is attached in Teams chat or Exchange email. Conditions target 3 set of locations (1. Exchange + Teams 2. Exchange Only 3. One Drive)

upvoted 1 times

...

slimshadi

2 years, 3 months ago

DLP can be apply to the following locations: Exchange email, SharePoint sites, OneDrive Accounts, Teams chat and channel messages, Devices, Microsoft Defender for Cloud App, On-premises repositories and Power BI (preview) in one policy. I will say, 1 policy and 3 rules. Tested this in my lab.

upvoted 1 times

...

Bob27745

2 years, 8 months ago

Valid on exam 9/21/2022

upvoted 3 times

...

LillyLiver

3 years, 1 month ago

I just created a custom policy with three rules included to meet all the requirements. So, maybe the 3 policy thing in this question is a relic. But you can do it in one policy now.

upvoted 4 times