Examice

Exam MS-102 All QuestionsBrowse all questions from this exam

Question 212

HOTSPOT

You have a Microsoft 365 E5 subscription that contains two users named [email protected] and [email protected] and a Microsoft SharePoint site named Site1.

You create a data loss prevention (DLP) policy named DLP1 that has the advanced DLP rules shown in the following table.

DLP1 is applied to Site1.

You have the files shown in the following table.

You copy the files to Site1.

How many notifications will each user receive? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

Discussion

MvdSpoel

txt file is in scope don't get confused with sentitifity label see https://learn.microsoft.com/en-gb/exchange/security-and-compliance/mail-flow-rules/inspect-message-attachments Answer is 4 and 0

Wuhao

4 file so 4 notification

TonyManero

The explanation is: When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced. For example, if content matches all of the following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule: Rule 1: only notifies users Rule 2: notifies users, restricts access, and allows user overrides Rule 3: notifies users, restricts access, and doesn't allow user overrides Rule 4: restricts access Rules 1, 2, and 4 would be evaluated, but not applied. In this example, matches for all of the rules are recorded in the audit logs and shown in the DLP reports, even though only the most restrictive rule is applied. So because the most restrictive rule, I think : User1--> 4 User2--> 3

Motanel

only that, if txt files are not supported, then it's - 3 - 2

Dave_Holden

txt files are included. As are csv and pdf. Plus all of the old and new office document types, doc docx etc.

northgaterebel

User1 = 4. All file types are now supported. https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about#files-monitored-via-policy User2 = 0. Agree with Paul_white about the ranking.

northgaterebel

Nope wrong lol. User1 = 3. Sharepoint DLP supports fewer file types than PC. https://learn.microsoft.com/en-us/purview/sensitivity-labels-sharepoint-onedrive-files#supported-file-types

NrdAlrt

So the DLP scanner for SPO can only scan Office documents, not txt files? So people wanting to bypass DLP in SPO can upload basic text files that anyone can open on any device. How does Microsoft not scan txt files?

Kmkz83510

But that link is specifically for sensitivity labels. I would be shocked if txt files were not supported in Sharepoint.

Paul_white

PERSONALLY I WILL GOT WITH USER1 = 3, AND USER 2 = 0. THE RANKING SAYS IT ALL https://www.examtopics.com/discussions/microsoft/view/67917-exam-ms-101-topic-3-question-107-discussion/

angra01

so basically no one knows !!

cpaljchc4

Rule priority order When an item matches multiple rules in a policy and those rules have identical actions, the actions from the highest priority rule is applied. According to the rule priority , I think User 1 - 4 , User 2 - 0 should be right? Ref: https://learn.microsoft.com/en-us/purview/dlp-policy-reference

Vaerox

Can you explain why user 2 gets 0 notifications? There are 2 files (if you exclude TXT files) that contain 2 or more IP-addresses, so User 2 should get 2 notifications?

DiligentSam

i think user 1 receive 3 notification Use2 receive 3 notification

Amir1909

- 2 - 1

faeem

For user2, there are 3 files with 3 or more IP's. Why would user2 not receive 3 notifications?

Murad01

I would go for: User1: 4 User2: 0

nicvig01

- 4 - 0

Tomtom11

https://learn.microsoft.com/en-us/purview/dlp-policy-reference

Tomtom11

https://learn.microsoft.com/en-us/purview/dlp-policy-reference

sergioandreslq

I tested it in my tenant demo, Box 1: I got 15 notifications to user1 mailbox, the answer is not there Box 2: I got 8 notifications to user2 mailbox, I got with 8. Why this is happening, No idea, this question was difficult to answer, that is why I created the DLP to see the results but, unfortunately, it is not clear. Sorry team, I will just choose this one to 8-8 but in this case, it is guessing because I believe even Microsoft doesn't know.

Greatone1

5 and 2 from ms 101 Reference: https://docs.microsoft.com/en-gb/exchange/security-and-compliance/mail-flow-rules/inspect-message-attachments

BlackCat9588

It should be 3 & 0 ?

kavikumar

It should be 4 & 3 ..right?

BlackCat9588

Txt file is not under scope. User 1 =3. Rule 3 cannot be appear as Rule 2 is fully cover with Rule 2. So, I think User 2 =0