Exam MS-100 topic 5 question 49 discussion

MS-101 question

For me the first marking is wrong. We are asked to modify the settings of the International Classification of Diseases (ICD-9-CM) => Adjustment for the SSN is not needed at all! Min. Instance count and Match accuracy of ICD-9-CM needs to be adjusted!

Other answers for the same question can be found here in the 101 exam. https://www.examtopics.com/discussions/microsoft/view/52124-exam-ms-101-topic-3-question-79-discussion/

I would change AND to OR in the policy definition so it would apply on ICD classifications even if didn’t have a SSN in the document. This would make it apply to more documents and then to reduce false positives I’d increase the accuracy.

I would change only the "match accuracy" for both to increase it and avoid false positive. No need t change the "count", because if you increase the "count" the policy likehood to apply will reduce. The question states that "You need to increase the likelihood that the DLP policy will apply".

MS-101 q

Both the minimum instance count and the minimum match accuracy need to be changed on the Medical Terms. If the minimum match accuracy was set to 99%, and the instance count to 1, that means 1 in every 100 could be a false positive. However if the instance count is increased to 5 matches, the number of false positives would drop exponentially. Unless there is specific reference to medical terms in the PII policy changing this would have no impact on reducing the false positives in the medical terms policy.

I understand the bottom option but why would the SSN min instance help?