Microsoft MS-PURVIEW-DLP Practice Test

MS-PURVIEW-DLP practice test: what's covered

• DLP Policies
• Endpoint DLP
• Browser Controls
• Adaptive Protection
• Alerts

Free MS-PURVIEW-DLP sample questions

1. A compliance team needs one DLP policy to protect credit card data across Exchange, SharePoint, OneDrive, Teams, endpoint devices, and web uploads. Which response is the BEST fit?

   • A. Create a Microsoft Purview DLP policy scoped to the required locations with sensitive information conditions and staged actions
   • B. Create separate unrelated mail flow rules only in Exchange
   • C. Use a retention label because labels always block exfiltration
   • D. Rely on password expiration to detect credit card data
   Show answer

   Correct: A. Create a Microsoft Purview DLP policy scoped to the required locations with sensitive information conditions and staged actions is the best answer because Purview DLP policies can monitor and protect sensitive data across multiple locations and activities. The other choices do not fit the scenario: Create separate unrelated mail flow rules only in Exchange addresses the wrong layer or timing, Use a retention label because labels always block exfiltration skips a required control, and Rely on password expiration to detect credit card data would create avoidable operational or security risk.

2. A pilot DLP policy may block legitimate finance work if enforced immediately. Which response is the BEST fit?

   • A. Start in test or audit mode with policy tips and alert review before moving to restrictive enforcement
   • B. Block all sharing on day one with no monitoring
   • C. Delete all sensitive files before testing
   • D. Disable user notifications so nobody understands impact
   Show answer

   Correct: A. Start in test or audit mode with policy tips and alert review before moving to restrictive enforcement is the best answer because staged rollout reduces business disruption and helps tune false positives. The other choices do not fit the scenario: Block all sharing on day one with no monitoring addresses the wrong layer or timing, Delete all sensitive files before testing skips a required control, and Disable user notifications so nobody understands impact would create avoidable operational or security risk.

3. A policy should apply only to the Finance department and not the whole tenant. Which response is the BEST fit?

   • A. Scope the policy using users, groups, administrative units, locations, or conditions that match Finance requirements
   • B. Apply globally and ask non-Finance users to ignore prompts
   • C. Create a separate Microsoft 365 tenant for Finance
   • D. Use only file extension matching because departments are file types
   Show answer

   Correct: A. Scope the policy using users, groups, administrative units, locations, or conditions that match Finance requirements is the best answer because policy scoping should reflect users, groups, and locations rather than broad tenant-wide enforcement when not required. The other choices do not fit the scenario: Apply globally and ask non-Finance users to ignore prompts addresses the wrong layer or timing, Create a separate Microsoft 365 tenant for Finance skips a required control, and Use only file extension matching because departments are file types would create avoidable operational or security risk.

4. A bank is designing DLP rules for payment-card data. Which TWO choices should the engineer select? (Choose TWO)

   • A. Use sensitive information types with confidence and instance-count thresholds
   • B. Add contextual conditions or exceptions to reduce false positives
   • C. Match only the word card in every document
   • D. Disable alerts because policy tips are enough
   Show answer

   Correct: A and B. Use sensitive information types with confidence and instance-count thresholds and Add contextual conditions or exceptions to reduce false positives are correct because DLP precision improves when built-in detectors are combined with thresholds and context. The distractors do not satisfy the requirement: Match only the word card in every document is incomplete for this case, and Disable alerts because policy tips are enough solves a different problem or weakens the design.

5. A policy has multiple rules and the administrator is unsure which action wins. Which response is the BEST fit?

   • A. Review rule priority, conditions, exceptions, and stop-processing behavior in the DLP policy
   • B. Assume the newest rule always wins regardless of priority
   • C. Move the policy to retention settings
   • D. Delete all lower severity rules without analysis
   Show answer

   Correct: A. Review rule priority, conditions, exceptions, and stop-processing behavior in the DLP policy is the best answer because DLP rule order and processing settings determine which actions apply. The other choices do not fit the scenario: Assume the newest rule always wins regardless of priority addresses the wrong layer or timing, Move the policy to retention settings skips a required control, and Delete all lower severity rules without analysis would create avoidable operational or security risk.

Last updated: 2026-10-19

MS-PURVIEW-DLP practice test FAQ

Related practice tests

• Microsoft SC-401 practice test
• Microsoft SC-900 practice test
• Microsoft SC-300 practice test
• Microsoft MD-102 practice test
• Defender for Cloud Apps session control practice test
• Microsoft SC-400 practice test