SC-900 Practice Test 49 — 15 Questions

Question 1

Refer to the exhibit. A Microsoft Purview administrator imported this JSON policy for automatic sensitivity labeling. After deployment, users report that emails containing German social security numbers are not being automatically labeled. What is the most likely cause?

Accepted Answer

Auto-labeling for emails requires 'applyWithOverride' behavior, not 'apply'.. The JSON defines a label with auto-labeling conditions based on the sensitive info type 'EU_Deutschland_SocialSecurityNumber'. However, the auto-labeling behavior is set to 'apply', which is only supported for SharePoint and OneDrive documents, not for Exchange emails. For emails, the behavior must be 'applyWithOverride' or 'applyWithNotify'. Therefore, the auto-labeling will not apply to emails containing the sensitive type. Option B is correct. Option A is wrong because encryption is configured. Option C is wrong because the label is published. Option D is wrong because the sensitivity type is valid.

Answer

The sensitive info type 'EU_Deutschland_SocialSecurityNumber' is not defined in the tenant.

Answer

The encryption setting prevents auto-labeling on emails.

Answer

The label is not published to users.

Question 2

An organization uses Microsoft Purview Compliance Manager. They need to track their progress against a specific regulatory standard and assign improvement actions to different teams. Which component should they use?

Accepted Answer

Compliance Manager assessments. Option B is correct because Compliance Manager provides assessments and improvement actions for regulatory standards. Option A is wrong because DLP is for data loss prevention. Option C is wrong because eDiscovery is for search. Option D is wrong because Audit is for logging.

Answer

eDiscovery

Answer

Data Loss Prevention

Answer

Audit logs

Question 3

A multinational corporation must comply with GDPR and requires that personal data of EU users be retained for a maximum of 90 days after account closure. After that, all personal data must be permanently deleted. Which combination of Microsoft Purview capabilities should be used?

Accepted Answer

Create a retention label with a retention period of 90 days and then delete the content automatically. A retention label applied automatically can retain data for 90 days, and then a deletion action at the end of the period ensures permanent deletion. Option A is correct. DLP does not handle deletion. eDiscovery is for search, not lifecycle management. Sensitivity labels do not enforce deletion.

Answer

Configure an eDiscovery case to delete content after 90 days

Answer

Apply a sensitivity label that expires after 90 days

Answer

Use a Data Loss Prevention policy to block retention after 90 days

Question 4

Refer to the exhibit. You are reviewing a sensitivity label configuration in Microsoft Purview. Based on the exhibit, what is the result when a user applies this label to a document?

Accepted Answer

The document is encrypted and a header/footer is added. The exhibit shows encryption enabled and header/footer markings. Encryption prevents unauthorized access, and markings add text. Option B is correct. The label does not automatically delete the document or prevent printing. It does not remove the label after a period.

Answer

The label is automatically removed after one year

Answer

The document is automatically deleted after 30 days

Answer

The document can be printed but not edited

Question 5

Your company uses Microsoft Purview to manage records. You need to ensure that financial records are retained for 7 years and then permanently deleted. Which type of policy should you create?

Accepted Answer

A retention policy with a retention period of 7 years and then delete. Option C is correct because a retention policy with a retention period of 7 years and then deletion will meet the requirement. Option A is wrong because a retention label with a disposition review does not guarantee automatic deletion. Option B is wrong because a DLP policy prevents data loss, not retention. Option D is wrong because a sensitivity label does not manage retention.

Answer

A sensitivity label set to 'Financial' with auto-labeling

Answer

A retention label that triggers a disposition review after 7 years

Answer

A DLP policy that blocks sharing of financial records

Question 6

Your organization uses Microsoft Purview eDiscovery to manage a legal case. You need to place a hold on emails for specific users, but you want to allow the system to apply the hold automatically. Which eDiscovery solution should you use?

Accepted Answer

Microsoft Purview eDiscovery (Premium). Option A is correct because eDiscovery (Premium) provides automatic hold capabilities. Option B is wrong because eDiscovery (Standard) requires manual hold. Option C is wrong because Audit does not provide holds. Option D is wrong because Communication Compliance is for regulatory communications.

Answer

Microsoft Purview eDiscovery (Standard)

Answer

Microsoft Purview Audit (Premium)

Answer

Microsoft Purview Communication Compliance

Question 7

Your organization uses Microsoft Purview to manage data classification. You need to ensure that sensitive data containing social security numbers is automatically labeled when stored in SharePoint Online. What should you configure?

Accepted Answer

Create an auto-labeling policy for sensitivity labels. Option A is correct because auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels to documents containing sensitive information types such as social security numbers. Option B is wrong because retention labels are for retention, not classification. Option C is wrong because DLP policies detect and prevent sharing but do not apply labels automatically. Option D is wrong because data classification dashboards provide visibility but do not apply labels.

Answer

Use the data classification dashboard in Microsoft Purview

Answer

Create a retention label policy

Answer

Configure a data loss prevention (DLP) policy

Question 8

Refer to the exhibit. You are reviewing a Microsoft Purview classification rule. The rule is enabled and set to apply a sensitivity label. However, you notice that documents containing EU personal data are not being labeled automatically. What is the most likely cause?

Accepted Answer

The rule does not include a condition to detect sensitive data. Option C is correct because a classification rule requires a condition (such as a sensitive information type) to detect content. The exhibit shows no condition, so the rule will not trigger. Option A is wrong because the rule status is Enabled, not Disabled. Option B is wrong because the label ID is present. Option D is wrong because there is no indication of a scope issue.

Answer

The label ID is invalid

Answer

The rule status is Disabled

Answer

The rule is not scoped to SharePoint Online

Question 9

A compliance administrator needs to generate a report showing all user activities related to accessing highly sensitive documents in SharePoint. Which Microsoft Purview solution should they use?

Accepted Answer

Audit (Standard or Premium). Option A is correct because Audit logs capture user activities such as access to files. Option B is wrong because DLP is for prevention, not reporting. Option C is wrong because eDiscovery is for content search. Option D is wrong because Communication Compliance is for communications monitoring.

Answer

eDiscovery

Answer

Data Loss Prevention

Answer

Communication Compliance

Question 10

Your organization uses Microsoft 365 and wants to classify and protect documents based on their content, such as credit card numbers. Which Microsoft Purview feature automatically classifies content based on sensitive information types?

Accepted Answer

Auto-labeling with sensitivity labels. Auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels based on sensitive information types like credit card numbers. Option A is correct. Unified labeling is the client, not automatic. DLP blocks sharing. eDiscovery searches.

Answer

Data Loss Prevention policy

Answer

Unified labeling client

Answer

eDiscovery

Question 11

Refer to the exhibit. You are evaluating a Microsoft Purview retention policy. The policy is applied to Exchange Online, SharePoint Online, and OneDrive for Business. What is the behavior of this policy?

Accepted Answer

Items are automatically deleted 365 days after creation. The policy retains items for 365 days from creation and then deletes them. Without preservation lock, users can delete items before 365 days, but the system retains them until the period ends. Option C is correct. Option A is wrong because it says items are kept indefinitely. Option B is wrong because deletion triggers after 365 days. Option D is wrong because preservation lock is false.

Answer

Items are retained indefinitely and cannot be deleted

Answer

Items are deleted 365 days after last modification

Answer

Items are preserved with a lock and cannot be deleted by users

Question 12

Your organization is implementing Microsoft Purview Communication Compliance to detect potential regulatory violations. You need to configure a policy that alerts when employees discuss insider trading in emails and Microsoft Teams messages. The solution should minimize false positives. Which action should you take?

Accepted Answer

Use a trainable classifier and train it with sample data. Option B is correct because training trainable classifiers with relevant sample data improves accuracy and reduces false positives. Option A is wrong because increasing the sensitivity threshold reduces alerts, increasing false negatives. Option C is wrong because including all messages increases noise. Option D is wrong because a global keyword list is less accurate than a trainable classifier.

Answer

Include all message types without filtering

Answer

Create a global keyword list of insider trading terms

Answer

Set the policy sensitivity threshold to 90%

Question 13

Refer to the exhibit. An administrator runs this KQL query in Microsoft Purview Audit. What is the purpose of this query?

Accepted Answer

To identify file types that a specific user uploaded more than 10 times in the last 30 days. Option B is correct because the query filters for file uploads by a specific user in the last 30 days, groups by file type, and counts files with more than 10 uploads per type. Option A is wrong because it's for a single user, not all users. Option C is wrong because it's for uploads, not deletions. Option D is wrong because there is no file size filter.

Answer

To find the total number of file uploads by all users in the last 30 days

Answer

To find files larger than a certain size uploaded by a specific user

Answer

To list all files deleted by a specific user in the last 30 days

Question 14

A company wants to ensure that emails containing credit card numbers are blocked from being sent externally. Which Microsoft Purview solution should they use?

Accepted Answer

Data Loss Prevention (DLP) policy. Option B is correct because Microsoft Purview Data Loss Prevention (DLP) policies can detect sensitive information like credit card numbers and block external sharing. Option A is wrong because sensitivity labels classify data but do not prevent sharing. Option C is wrong because communication compliance monitors for policy violations but does not block data exfiltration. Option D is wrong because information barriers restrict communication between specific groups, not sensitive data.

Answer

Sensitivity labels

Answer

Communication compliance

Answer

Information barriers

Question 15

Refer to the exhibit. You run the PowerShell command to search the unified audit log for file deletions. The command returns no results, but you know a file was deleted last week. What is the most likely reason?

Accepted Answer

Audit logging is not enabled for the organization. Option B is correct because Audit (Standard) only retains audit logs for 90 days, but the issue here is that the command uses -Operations FileDeleted, which may not be the correct operation name; however, the most likely reason is that Audit (Premium) is required for certain operations. Actually, FileDeleted is a valid operation. The correct answer is that Audit logging must be enabled. Option A is wrong because the command is correct. Option C is wrong because 7 days is within retention. Option D is wrong because the operation name is correct.

Answer

The operation name 'FileDeleted' is incorrect

Answer

Audit logs are only retained for 90 days

Answer

The StartDate and EndDate are incorrect

SC-900 Practice Test 49 — 15 Questions

Exhibit

SC-900 Practice Test 49 — 15 Questions

Exhibit