Microsoft Purview Data Governance And Protection Assessment Practice Tests

Question 1

A company requires a 'Highly Confidential' label to enforce encryption where only a specific group of $N=5$ users can co-author. If the encryption overhead per file is defined by $E(f) = 0.05f + 10$ KB, where $f$ is the file size in KB, calculate the total storage requirement for $100$ files each of size $f=200$ KB including the encryption metadata overhead.

Accepted Answer

21000 KB

Answer

20000 KB

Answer

22000 KB

Answer

25000 KB

Question 2

An auto-labeling policy uses a simulation mode. If the probability of a false positive detection for a sensitive information type is $P(FP) = 0.02$ and the total number of documents scanned is $S = 5000$, calculate the expected number of documents incorrectly labeled.

Accepted Answer

100

Answer

50

Answer

200

Answer

500

Question 3

You are configuring a retention policy for $T=7$ years. If the compliance requirement mandates that the data must be purged at time $t = T + \Delta t$ where $\Delta t = 0.5$ years, determine the total duration in days (assuming 365 days per year) the data must be retained.

Accepted Answer

2737.5 days

Answer

2555 days

Answer

2920 days

Answer

3000 days

Question 4

A preservation lock is applied to a policy. If the original policy duration is $D = 10$ years, and the administrator attempts to decrease the duration by $x$ years, which condition must hold for the modification to be valid under strict immutability rules?

Accepted Answer

x = 0

Answer

x < 0

Answer

x > 0

Answer

x \geq 1

Question 5

Which of the following actions are permitted after a retention policy has been assigned a 'Preservation Lock'?

Answer

Increasing the retention duration

Answer

Decreasing the retention duration

Answer

Adding new locations to the policy

Answer

Deleting the policy

Question 6

If an auto-labeling policy is configured to scan $N$ documents and the sensitivity threshold is set such that only documents with a confidence level $C \geq 0.85$ are labeled, and the distribution of confidence scores follows a uniform distribution $U(0, 1)$, calculate the fraction of documents that will be labeled.

Accepted Answer

0.15

Question 7

Retention policies applied at the container level (e.g., SharePoint site) take precedence over retention labels applied at the item level if the label is configured to 'do nothing' at the end of the period.

Accepted Answer

False

Answer

True

Question 8

An organization has $M=3$ departments. Each department requires a unique retention policy. If the cost of managing each policy is $C_p = €500$ and the cost of audit compliance per policy is $C_a = €200$, calculate the total cost for $M$ departments.

Accepted Answer

€2100

Answer

€1500

Answer

€1800

Answer

€2400

Question 9

To optimize label visibility, you must order labels by priority $P_i$. If you have 4 labels with priorities $P_1=1, P_2=2, P_3=3, P_4=4$, and you insert a new label with priority $P_{new}=2$, what is the new priority of the original label $P_2$?

Accepted Answer

3

Answer

1

Answer

2

Answer

4

Question 10

Calculate the total number of unique sub-label combinations possible if you have $L=3$ parent labels and each parent has $S=4$ sub-labels.

Accepted Answer

12

Question 11

A DLP policy is configured with two rules, Rule A and Rule B, both targeting the same sensitive information type. Rule A has a priority of 1 and a 'Stop processing' action enabled. Rule B has a priority of 2. If a file triggers both rules, determine the final outcome for the user.

Accepted Answer

Rule A is applied, and Rule B is ignored.

Answer

Rule B is applied, and Rule A is ignored.

Answer

Both Rule A and Rule B are applied simultaneously.

Answer

Neither rule is applied due to a conflict.

Question 12

An organization monitors sensitive data transfers. Let $N$ be the number of sensitive instances detected in a document. The policy triggers an alert if $N \geq 5$ and blocks the transfer if $N \geq 10$. If a document contains $N = 12$ instances, calculate the total number of policy actions triggered.

Accepted Answer

2

Question 13

An endpoint DLP policy is designed to restrict USB file transfers. If the probability of a false positive per file transfer is $P(F) = 0.02$, calculate the probability that exactly 2 out of 100 independent transfers are incorrectly flagged as false positives using the binomial distribution formula $P(X=k) = \binom{n}{k} p^k (1-p)^{n-k}$.

Accepted Answer

Approximately 0.273

Answer

Approximately 0.135

Answer

Approximately 0.020

Answer

Approximately 0.500

Question 14

In Microsoft Purview, if you have two rules with overlapping conditions, the rule with the higher numerical priority value (e.g., priority 10 vs priority 1) is evaluated first.

Accepted Answer

False

Answer

True

Question 15

Which of the following are necessary prerequisites for successfully onboarding a macOS device to Microsoft Purview Endpoint DLP?

Answer

The device must be running a supported version of macOS.

Answer

The device must be managed via a mobile device management (MDM) solution.

Answer

The Microsoft Purview agent must be deployed to the device.

Answer

The device must be connected to a local domain controller via Ethernet.

Question 16

An organization monitors a departing employee whose risk score $S$ is modeled by the function $S(t) = S_0 e^{kt}$, where $t$ is the number of days since resignation. If the initial risk score $S_0 = 10$ and the score doubles every 5 days, calculate the risk score after 15 days.

Accepted Answer

80

Answer

40

Answer

60

Answer

100

Question 17

An audit log system generates $N$ events per hour. If the retention policy requires keeping logs for $D = 90$ days and the average size of an event log is $S = 2$ KB, calculate the total storage requirement $T$ in GB. Use the formula $T = \frac{N \cdot 24 \cdot D \cdot S}{10^6}$. If $N = 5000$, what is $T$?

Accepted Answer

21.6

Question 18

A security team uses a weighted indicator system to flag risky users. The total risk score $R$ is defined as $R = \sum_{i=1}^{n} w_i x_i$, where $w_i$ is the weight and $x_i \in \{0, 1\}$ is the occurrence of an indicator. If weights are $w_1=0.4$ (file download), $w_2=0.3$ (USB usage), and $w_3=0.3$ (off-hours access), determine the risk score for a user who performed a file download and off-hours access.

Accepted Answer

Option A

Answer

Option B

Answer

Option C

Answer

Option D

Question 19

If an audit log retention policy is set to $D_{new} = 30$ days, and the current logs are stored for $D_{old} = 90$ days, reducing the retention policy will immediately delete all logs older than 30 days.

Accepted Answer

True

Answer

False

Question 20

Which of the following tools are appropriate for retrieving and analyzing audit data during a forensic investigation? Select all that apply.

Answer

Activity explorer

Answer

Content search

Answer

HR data connector

Answer

Priority user group configuration

Microsoft Purview Data Governance And Protection Assessment Practice Tests

Practice Tests

Microsoft Purview Data Governance and Protection Assessment

Generate Microsoft Purview Data Governance And Protection Assessment practice tests with AI