MS-102 Microsoft Exam Lab Questions

Collaborators

Any from domain

contains fabrikam.com

Access level

equals

Public (Internet), Public, External

The correct policy is a file policy in Microsoft Defender for Cloud Apps because the requirement is to alert when files are shared with a specific external domain. Microsoft states that Defender for Cloud Apps file policies can monitor files by metadata and sharing context, and one of Microsoft’s listed examples is “Sharing with external domains” , which generates alerts for files shared with accounts owned by specific external domains.

The first filter must be Collaborators – Any from domain – contains fabrikam.com . This identifies files where at least one collaborator belongs to the specified external domain. Selecting Entire organization or Groups would evaluate organization-wide or group-based sharing, not sharing with a specific external email domain.

The second filter must be Access level equals Public (Internet), Public, External . Microsoft documents Access level as the file-sharing access level, including public, external, internal, or private. Microsoft’s common information-protection policy guidance also uses Access Level equals Public (Internet) / Public / External to detect externally shared files.

Therefore, the completed filter should target files with external/public sharing exposure and a collaborator from fabrikam.com .

Services: Exchange Online and SharePoint Online only

Retention period: 1 year

The correct dropdown selection is Exchange Online and SharePoint Online only . Microsoft 365 Backup supports backup and recovery for OneDrive, SharePoint, and Exchange Online workloads. From the services listed in this question, Exchange Online and SharePoint Online are the only supported services. Microsoft Entra is not a Microsoft 365 Backup workload because it is an identity and directory platform, not a content workload protected by Microsoft 365 Backup. Microsoft Teams is also not selected as a separate backup service. Teams files are stored in SharePoint or OneDrive, but Microsoft 365 Backup does not list “Teams” as an independent backup workload. Microsoft’s backup policy documentation also separates backup policy configuration into SharePoint, Exchange, and OneDrive tabs, reinforcing that those are the protected workload categories.

The longest available retention period is 1 year . Microsoft’s Microsoft 365 Backup FAQ states that when backed-up OneDrive or Exchange content is removed from the backup policy or the user is deleted, the backup is retained for one year from the date the backup was created . Therefore, among the given retention choices, the correct maximum is 1 year , not 5 or 10 years.