Step2Study

Microsoft 365 Certified: Administrator Expert practice questions

217 free questions with answers and explanations.

Practice test
  1. 201.A global company needs to ensure that specific sensitive information types (SITs) unique to their industry, such as 'Pharmaceutical Batch ID' (e.g., 'BATCH-PHARMA-XYZ-12345') or 'Clinical Trial Protocol Number' (e.g., 'CTP-2023-007'), are consistently identified across all Microsoft 365 services. These SITs must be detectable by Data Loss Prevention (DLP) policies and trigger auto-labeling for documents containing them. Which Microsoft Purview feature should the administrator use to define and deploy these industry-specific identifiers?Implement and manage Microsoft Purview compliance
  2. 202.A global enterprise needs to ensure that specific sensitive information types (SITs) unique to their industry, such as 'Proprietary Project ID' (e.g., 'PROJ-XYZ-2023-001') or 'Client Confidential Code' (e.g., 'CLNT-ABC-SECURE'), are consistently identified across all Microsoft 365 workloads. These SITs are not covered by the default Microsoft Purview SITs. What should an administrator implement?Implement and manage Microsoft Purview compliance
  3. 203.A Microsoft 365 administrator is configuring a retention policy for all SharePoint sites to ensure that documents are kept for at least five years, regardless of user actions. After five years, the documents should be automatically deleted. The administrator wants to ensure that users cannot circumvent this policy by manually deleting items before the retention period expires. Which type of retention label or policy should be applied?Implement and manage Microsoft Purview compliance
  4. 204.A global company needs to ensure that specific sensitive information types (SITs) are consistently detected and protected across all Microsoft 365 services, including Exchange, SharePoint, OneDrive, and Teams. They also require that these SITs are recognized in their custom line-of-business applications. Which method allows for the creation of custom sensitive information types that can be deployed across both Microsoft 365 and external applications?Implement and manage Microsoft Purview compliance
  5. 205.A Human Resources department uses Microsoft 365 and needs to ensure that all documents containing employee performance reviews are automatically assigned a sensitivity label that encrypts the document and restricts access to only HR personnel. These documents are created in various SharePoint Online sites and OneDrive accounts. The identification of these documents should be based on a combination of keywords such as 'performance review' and 'employee ID'. Which method should the administrator use to achieve this automated labeling?Implement and manage Microsoft Purview compliance
  6. 206.A legal department requires the ability to quickly and comprehensively search for and preserve all emails, documents, and Teams chat messages related to a specific project code ('PROJ-FIN-2024') across the entire organization for an ongoing litigation case. The solution must allow for deduplication, near-duplicate detection, and the ability to export data in a reviewable format. Which Microsoft Purview feature should be utilized?Implement and manage Microsoft Purview compliance
  7. 207.A company is implementing Microsoft Purview and needs to ensure that sensitive financial data, such as credit card numbers and bank account details, is automatically identified and protected across Microsoft 365 services. The company requires a solution that can detect these data types without manual tagging by users and apply appropriate compliance actions. Which Microsoft Purview component should be used to achieve this goal?Implement and manage Microsoft Purview compliance
  8. 208.A global enterprise is migrating its legacy archive data to Microsoft 365 and needs to ensure that all email and document records related to specific legal cases are preserved indefinitely for audit and litigation purposes. These records are identified by unique case identifiers (e.g., 'CASE-LIT-2022-005'). The organization requires that these records cannot be altered or deleted by any user, including administrators. Which Microsoft Purview feature should be implemented to meet this requirement?Implement and manage Microsoft Purview compliance
  9. 209.A company is conducting an internal investigation into potential fraud. The legal team requires access to all emails, documents, and chat messages from a specific set of custodians over the past 18 months. They need to collect this data in a forensically sound manner, deduplicate it, and be able to review it efficiently before exporting. Which Microsoft Purview solution should the legal team leverage?Implement and manage Microsoft Purview compliance
  10. 210.A company is concerned about employees accidentally or maliciously sharing sensitive customer data, such as Social Security Numbers (SSNs) and credit card numbers, with external parties via email and Microsoft Teams. They want to prevent this data from leaving the organization. Which Microsoft Purview solution should be implemented?Implement and manage Microsoft Purview compliance
  11. 211.An organization uses Microsoft Purview to manage compliance. They have a requirement to apply a specific retention label, 'Contract-7Years', to all documents uploaded to a particular SharePoint Online library, regardless of their content. This label must be applied automatically upon upload. What is the most efficient way to achieve this?Implement and manage Microsoft Purview compliance
  12. 212.A global pharmaceutical company uses Microsoft 365. Due to strict clinical trial regulations, all documents related to a specific trial must be retained for 15 years from the trial's completion date, regardless of when the document was created or modified. This retention period must start precisely when the trial formally concludes, and the retention policy must be immutable. Which Microsoft Purview feature should be implemented?Implement and manage Microsoft Purview compliance
  13. 213.A company uses Microsoft Purview to manage compliance. They need to ensure that all Microsoft 365 audit logs are retained for at least seven years to meet regulatory requirements. Currently, the default audit log retention is 90 days for most activities. The company has an E5 subscription. What is the most efficient way to achieve this requirement?Implement and manage Microsoft Purview compliance
  14. 214.A global manufacturing company needs to manage access to highly confidential design documents stored in SharePoint Online and OneDrive. They want to ensure that only users from specific departments can access these documents, even if they are shared externally, and that access is revoked if a user leaves those departments. Furthermore, they need to apply specific visual markings and encryption. Which combination of Microsoft Purview features should be utilized?Implement and manage Microsoft Purview compliance
  15. 215.A Microsoft 365 administrator needs to configure a retention policy for all Microsoft Teams private channel messages. The policy must ensure that messages are retained for five years from their creation date and then automatically deleted. Additionally, team owners should not be able to override or delete these messages prematurely. Which configuration is required?Implement and manage Microsoft Purview compliance
  16. 216.A Microsoft 365 administrator is configuring Microsoft Defender for Endpoint. The organization requires that all newly detected vulnerabilities on managed devices are automatically assigned to the IT security team for remediation, and that high-severity vulnerabilities trigger an immediate notification to the security operations center (SOC). Which feature in Microsoft Defender for Endpoint should the administrator configure to meet these requirements?Implement and manage Microsoft Defender XDR
  17. 217.A company uses Microsoft Entra ID for identity management. They need to ensure that administrative roles, such as Global Administrator, are assigned only when necessary and for a limited time. This should minimize the window of opportunity for malicious actors. Which Microsoft Entra ID feature should the company implement?Implement and manage Microsoft Entra ID