Exam MS-101 topic 3 question 4 discussion

Actual exam question from Microsoft's MS-101

Question #: 4
Topic #: 3

Your company has a Microsoft 365 tenant.
The company sells products online and processes credit card information.
You need to be notified if a file stored in Microsoft SharePoint Online contains credit card information. The file must be removed automatically from its current location until an administrator can review its contents.
What should you use?

A. a Microsoft 365 compliance center data loss prevention (DLP) policy
B. a Microsoft Defender for Cloud Apps access policy
C. a Microsoft 365 compliance center retention policy
D. a Microsoft Defender for Cloud Apps file policy

Show Suggested Answer

Suggested Answer: D 🗳️

by ServerBrain at Dec. 7, 2022, 12:02 p.m.

Comments

Submit Cancel

Fala_Fel

Highly Voted 2 years, 5 months ago

Selected Answer: D

Going for D Lots of discussion here, take your pick, could be A, I think D https://www.examtopics.com/discussions/microsoft/view/11520-exam-ms-101-topic-3-question-5-discussion/

upvoted 9 times

...

NitishKarmakar

Most Recent 1 year, 9 months ago

Correct option D: Microsoft Defender for Cloud Apps file policy "To set admin quarantine settings, in the Microsoft 365 Defender portal, select Settings. Then choose Cloud Apps. Under Information Protection, choose Admin quarantine. Provide a site for the quarantine folder location and a user notification that your user will receive when their file is quarantined." https://docs.microsoft.com/en-us/cloud-app-security/use-case-admin-quarantine#set-up-admin-quarantine A DLP Policy can only prevent access, but cannot remove content.

upvoted 1 times

...

Jo696

2 years ago

Selected Answer: A

I actually think this is A. Looking at both policies, in cloud Apps, none of the templates allow to look specifically for credit cards however DLP you can assign a financial template and on the Restrict access move the file to a quarantined folder. It is sensitive financial information, it has to be DLP. Unless I am missing something in Cloud App create a file policy I cannot see how you would do it. Happy to be proven wrong if I am.

upvoted 1 times

...

Mshaty

2 years, 1 month ago

this policy is to protect sensitive information so its DLP

upvoted 1 times

...

jamspurple

2 years, 2 months ago

File Policy in Defender for Cloud Apps can put the document in Admin quarantine, answer is D

upvoted 2 times

...

Silverdl

2 years, 6 months ago

I thin it's D, Please correct me if I'm wrong

upvoted 4 times

certacc

2 years, 5 months ago

Agree. The key statement is "removed automatically....". You need to use the admin quarantine to remove it. DLP can restrict it to owner, last modified and site admin, but that isn't removing it until it approved by an admin. The only way I can see to do that is the admin quarantine which will remove the file and put it in a designated folder for admin review.

upvoted 4 times

...

ServerBrain

2 years, 6 months ago

Selected Answer: A

100% correct

upvoted 1 times

...