Module Assessment

1.

Relecloud needs to detect a fixed roster of 50,000 known Woodgrove Bank account numbers with as few false positives as possible. Which classification technique best fits this requirement?

Exact data match (EDM), because it flags only content that matches exactly against the uploaded reference table of known values

A trainable classifier, because it uses machine learning to improve accuracy over time

A keyword-based sensitive information type (SIT), because it can be configured quickly with minimal setup

2.

An administrator scopes a sensitivity label only to Groups & sites and applies it to a Teams site used by Woodgrove's regulated case team. What happens to the individual files inside that site?

The files automatically inherit the container's label the next time they're opened

The files aren't automatically labeled—a Groups & sites-only label protects the container itself, not the items inside it

The files can't be labeled at all as long as the container label remains applied

3.

A user is included in two sensitivity label policies: Policy A (priority 1) requires a justification to remove a label; Policy B (priority 3) doesn't. The user removes a label from a file with no justification prompt. Why?

Policy A was misconfigured and needs to be recreated

The user's available labels are limited to only Policy A's labels, so Policy B's setting doesn't apply

Policy B has the higher priority, so its "no justification required" setting wins outright over Policy A's setting for this conflict

4.

An administrator wants to confirm that no one has quietly downgraded or removed a sensitivity label from Woodgrove's transaction records over the past two weeks. Which Purview reporting surface answers this question?

Content explorer, because it shows every version of every file that has ever existed

Either surface works equally well, since they show the same underlying data

Activity explorer, because it shows a historical view of label-related activity, including labels changed or removed

5.

Before expanding Microsoft 365 Copilot access to a case team's site, an administrator verifies that a highly sensitive case file protected by Double Key Encryption (DKE) is properly grounded for Copilot. What should the administrator expect?

Copilot returns the file's content as long as the user has EXTRACT and VIEW usage rights

Copilot never returns or uses DKE-protected content, regardless of the user's permissions

Copilot returns the file's content but not its sensitivity label

Check your knowledge

Feedback