Exam MS-500 topic 3 question 18 discussion

Actual exam question from Microsoft's MS-500

Question #: 18
Topic #: 3

You have a Microsoft 365 tenant.
You have a database that stores customer details. Each customer has a unique 13-digit identifier that consists of a fixed pattern of numbers and letters.
You need to implement a data loss prevention (DLP) solution that meets the following requirements:
✑ Email messages that contain a single customer identifier can be sent outside your company.
✑ Email messages that contain two or more customer identifiers must be approved by the company's data privacy team.
Which two components should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. a sensitive information type
B. a sensitivity label
C. a retention label
D. a DLP policy
E. a mail flow rule

Show Suggested Answer

Suggested Answer: AD 🗳️
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitive-information-type-entity-definitions?view=o365-worldwide

by kiketxu at March 15, 2021, 10:46 p.m.

Comments

Submit Cancel

kiketxu

Highly Voted 4 years, 2 months ago

You need to create sensitivity infotype for sure but M365 DLP not yet support message approval. Instead you need to use mail flow rule. https://docs.microsoft.com/es-es/exchange/security-and-compliance/mail-flow-rules/common-message-approval-scenarios#example-4-forward-messages-that-match-one-of-several-criteria Additional interesting discussion: https://www.reddit.com/r/Office365/comments/f1ux42/create_approval_workflow_with_office_365_dlp/

upvoted 8 times

...

mkoprivnj

Most Recent 3 years, 6 months ago

Selected Answer: AD

I'll go with A & D.

upvoted 1 times

...

Rstilekar

3 years, 6 months ago

This solution should be D,A,E you need first a DLP (( you can add an Action to forward for approval to specific approvers within the DLP Policy )), after that create new sensitive info type and at last an exchange transport rule (( Mail flow rule. Used to create rule to block messages outside org. if min count of Sensitive info matches 2 )) But since question stands only for which 'TWO' the answer is supposed to be correct... A & D.

upvoted 1 times

...

subbuhotmail

3 years, 11 months ago

Firstly, the question is, it asked to create DLP policy. Second, it didn't mention as approvers, it says approved identifiers by data Privacy team. "two or more customer identifiers must be approved by the companyג€™s data privacy team" So answer is A&D Only.

upvoted 3 times

...

james1

3 years, 11 months ago

This is correct as you can add an Action to forward for approval to specific approvers within the DLP Policy

upvoted 2 times

EzeQ

3 years, 9 months ago

This option is available if you restrict the locations to apply the policy to Exchange (at least)

upvoted 2 times

...

bsldwp_2020

4 years ago

Answer should be A & E. A - Sensitivity Info. Used to create the sensitivity info type - 13 digit identifiers. E - Mail flow rule. Used to create rule to block messages outside org. if min count of Sensitive info matches 2.

upvoted 3 times

bsldwp_2020

4 years ago

Correction: Even the same rule can be created via the DLP policy as well. So, D is also right.

upvoted 2 times

...

belyo

4 years, 2 months ago

IMO this solution should be D,A,E you need first a DLP, after that a sensitive type and at last an exchange transport rule But since question stands only for which 'TWO' the answer is supposed to be correct...

upvoted 1 times

...