Pass Your Microsoft AB-900 Exam Easy!

DLP alerts provide matched-rule context for investigation and follow-up. It is used for actionable sensitive-data incident triage; this scenario calls for diagnosis of conflicting DLP outcomes.

Policy tips make controls visible while approved overrides can be recorded. That addresses guided exception to a DLP rule, whereas the current case requires diagnosis of conflicting DLP outcomes.

Test mode measures candidate matches without necessarily enforcing blocks. It is used for safe predeployment DLP evaluation; this scenario calls for diagnosis of conflicting DLP outcomes.

Retention labels classify items into lifecycle rules independently of location-wide policies. Its purpose is item-level contract retention; the specified need is protected declared business record.

Retain-then-delete keeps content for a minimum period and disposes afterward. Its purpose is scheduled preservation followed by disposal; the specified need is protected declared business record.

Retention policies apply broad retention behavior to supported workloads. It would support location-wide mail retention, not the stated protected declared business record.

Retention wins over deletion while legally required preservation is active. This helps with conflict-safe content preservation instead of the required controlled final deletion of records.

Holds preserve covered data against ordinary deletion during legal matters. The action is relevant to litigation-driven content preservation rather than controlled final deletion of records.

Lifecycle metadata and audit trail explain governance state. The action is relevant to evidence of record lifecycle assignment rather than controlled final deletion of records.

Case workflows preserve the investigation outcome and reasoning. It is used for accountable insider-risk case closure; this scenario calls for policy for suspicious user exfiltration.

Insider risk combines configured indicators to identify risky internal behavior. That addresses investigation of concerning employee data activity, whereas the current case requires policy for suspicious user exfiltration.

Insider risk privacy controls limit identity visibility until justified. It is used for privacy-aware insider-risk review; this scenario calls for policy for suspicious user exfiltration.

Review workflows provide auditable case handling for flagged messages. Its purpose is documented response to harmful communication; the specified need is tuned misconduct detection quality.

Communication Compliance monitors supported communications for conduct and policy violations. It would support workplace communication policy review, not the stated tuned misconduct detection quality.

Reviewer roles control visibility of flagged communications. Its purpose is restricted sensitive-message review; the specified need is tuned misconduct detection quality.

AI activity records expose supported interaction metadata and DLP events. The action is relevant to specific AI interaction activity evidence rather than Copilot-focused oversharing risk assessment.

Supported Purview protections can restrict handling of labeled sensitive data by Copilot. The action is relevant to policy-governed processing of labeled files rather than Copilot-focused oversharing risk assessment.

DSPM for AI surfaces AI activity, exposure indicators, and recommended controls. This helps with organization-wide AI data-security visibility instead of the required Copilot-focused oversharing risk assessment.

Content labels classify individual documents and may protect the file. That addresses file-level confidentiality, whereas the current case requires baseline classification of new files.

Container labels govern supported site and group configuration settings. It is used for site-level classification policy; this scenario calls for baseline classification of new files.

Publishing configuration controls available labels and user presentation. It is used for published label catalog for users; this scenario calls for baseline classification of new files.

DLP telemetry records policy match and enforcement. Its purpose is source of a sensitive mail protection action; the specified need is preservation of responsive mailbox data.

Audit records document supported user and administrative operations. It would support file deletion activity evidence, not the stated preservation of responsive mailbox data.

eDiscovery supports case-based identification and collection of evidence. Its purpose is litigation search across supported content; the specified need is preservation of responsive mailbox data.

eDiscovery search targets responsive content for legal review. The action is relevant to search and collect case-specific email evidence rather than employee behavioral risk investigation.

Content explorer summarizes classified content across supported locations. This helps with inventory of content matching a sensitive type instead of the required employee behavioral risk investigation.

Activity explorer tracks classified-content activities over time. The action is relevant to action-centered sensitive-data event history rather than employee behavioral risk investigation.

Auto-labeling can apply a matching classification without per-file manual selection. It is used for policy-driven classification of matching files; this scenario calls for advisory classification suggestion.

Justification requirements make classification reductions accountable. It is used for logged declassification decision; this scenario calls for advisory classification suggestion.

User-selectable labels enable contextual classification by authors. That addresses user-driven classification decision, whereas the current case requires advisory classification suggestion.

Sensitive information types match structured patterns and proximity evidence. It would support structured national-identifier detection, not the stated high-confidence match against approved data.

Classifier models identify topic and content patterns not tied to one exact token. Its purpose is semantic R&D sensitive-content detection; the specified need is high-confidence match against approved data.

Document fingerprinting identifies content resembling a supplied exemplar. Its purpose is template-specific document identification; the specified need is high-confidence match against approved data.