Exam MS-500 topic 3 question 32 discussion

It's possible for content to match several rules in a DLP policy, but only the policy tip from the most restrictive, highest-priority rule will be shown. For example, a policy tip from a rule that blocks access to content will be shown over a policy tip from a rule that simply sends a notification. This prevents people from seeing a cascade of policy tips. https://learn.microsoft.com/en-us/microsoft-365/compliance/use-notifications-and-policy-tips?view=o365-worldwide

Given explanation is correct

'if match, stop processing: No' on Rule 1. Ans is correct.

Tried to replicate the exact same scenario: When selecting settings for rule 2 getting this error: "Stop processing additional DLP policies and rules if this rule matches, is only supported for Exchange location." Can't even be tested since in the question conditions we have SharePoint DLP policy. MS exam question melting my brains. They either go into small details or just look at concept level. I would love to have opportunity after exam to go through questions with MS exam reps and let them demonstrate their answers are correct.

D for me. When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced. For example, if content matches all of the following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule: Rule 1: only notifies users Rule 2: notifies users, restricts access, and allows user overrides Rule 3: notifies users, restricts access, and doesn't allow user overrides Rule 4: restricts access In this case, Tip1 and Tip have similar restriction but Tip2 says 'yes' to stop processing if match. https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-policy-reference?view=o365-worldwide#hosted-service-workloads

Valid on 28/01/23

C, because highest rank only. Article states that: "Only the policy tip from the highest priority, most restrictive rule will be shown. For example, a policy tip from a rule that blocks access to content will be shown over a policy tip from a rule that simply sends a notification. This prevents people from seeing a cascade of policy tips."

We are talking about policy tips being shown, not about which rule is being applied. Only rule would be applied, but as 2 rules match (well 3, but we stopped processing after the second one) and both have a tip associated with them, both tips would be shown.

Answer is C Tip1 only The Priority parameter specifies a priority value for the policy that determines the order of policy processing. A lower integer value indicates a higher priority, the value 0 is the highest priority, and policies can't have the same priority value

It's possible for content to match several rules in a DLP policy, but only the policy tip from the most restrictive, highest-priority rule will be shown. For example, a policy tip from a rule that blocks access to content will be shown over a policy tip from a rule that simply sends a notification. This prevents people from seeing a cascade of policy tips.

D 1 & 2

Correct for me