Exam MS-101 topic 3 question 91 discussion

Actual exam question from Microsoft's MS-101

Question #: 91
Topic #: 3

You have a Microsoft 365 E5 tenant.
You need to be notified when emails with attachments that contain sensitive personal data are sent to external recipients.
Which two policies can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. a data loss prevention (DLP) policy
B. a sensitivity label policy
C. a Microsoft Defender for Cloud Apps file policy
D. a communication compliance policy
E. a retention label policy

Show Suggested Answer

Suggested Answer: AD 🗳️

by otday at July 1, 2021, 10:38 a.m.

Comments

Submit Cancel

DiscGolfer

Highly Voted 3 years, 7 months ago

Selected Answer: AD

https://docs.microsoft.com/en-us/microsoft-365/compliance/communication-compliance?view=o365-worldwide#actionable-insights

upvoted 6 times

...

jonny_sins

Most Recent 1 year, 10 months ago

correct. Chat GPT daddy has confirmed. While sensitivity label policies and retention label policies can also play a role in classifying and managing sensitive data, they are not specifically designed for the real-time detection and notification of emails with attachments containing sensitive personal data being sent to external recipients. Microsoft Defender for Cloud Apps file policies focus on securing files and documents within cloud apps and services, which is slightly different from the scenario described where you want to monitor emails and their attachments. In summary, a combination of a data loss prevention (DLP) policy and a communication compliance policy would provide a comprehensive solution to notify you when emails with attachments containing sensitive personal data are sent to external recipients.

upvoted 1 times

...

Domza

3 years, 10 months ago

We in Compliance section - there is no CAS

upvoted 2 times

us3r

3 years, 6 months ago

forget the sections, questions many come from various different sections....

upvoted 1 times

...

otday

3 years, 12 months ago

I think this is A (DLP) and C (Cloud App Security file policy)

upvoted 3 times

otday

3 years, 12 months ago

Actually A and D are correct based on the links provided.

upvoted 11 times

[Removed]

3 years, 5 months ago

Would also go with A and D. Also in MCAS file policies only Governance actions for onedrive and sharepoint are available…

upvoted 1 times

...

jkklim

3 years, 7 months ago

https://docs.microsoft.com/en-us/microsoft-365/compliance/communication-compliance?view=o365-worldwide Understand what is communication compliance policy is used for - Since this is a compliance policy for audit purposes only, there are NO email notifications. a Microsoft Cloud App Security file policy - can notified u immediately. I will choose AC

upvoted 1 times

us3r

3 years, 6 months ago

no reference for EMAIL notifications in the question. General notification means also alert. exists on communication compliance policy: Alerts: When a message matches a policy condition, an alert is automatically generated. For each alert, you can see the status, the severity, the time detected, and if an Advanced eDiscovery case is assigned and its status. New alerts are displayed on the communication compliance home page and the Alerts page and are listed in order of severity.

upvoted 2 times

...