SC-900 Practice Exam 52 — 20 Questions

Question 1

Refer to the exhibit. A legal team needs to preserve all documents in SharePoint and OneDrive for 5 years. The current policy retains for 1 year. What should the administrator do to meet the requirement?

Accepted Answer

Change the retention duration to 1825 days.. Option C is correct because the policy retains for 365 days (1 year), but the requirement is 5 years. Changing the retention duration to 1825 days (5 years) meets the requirement. Option A is wrong because the policy already includes both locations. Option B is wrong because changing to Delete would delete content. Option D is wrong because changing to KeepAndDelete would still delete after retention, but the duration is the issue.

Answer

Add Exchange Online to the locations.

Answer

Change the retention type to Delete.

Answer

Change the retention action to KeepAndDelete.

Question 2

Your organization is implementing Microsoft 365 and needs to prevent sensitive data from being copied to USB drives. Which Microsoft Purview solution should you configure?

Accepted Answer

Endpoint data loss prevention (Endpoint DLP). Option C is correct because Endpoint DLP can monitor and restrict actions on endpoints like copying to USB drives. Option A is wrong because Sensitivity labels classify but do not block actions. Option B is wrong because Audit logs track but do not block. Option D is wrong because Communication Compliance monitors communications, not endpoint activities.

Answer

Audit logs

Answer

Communication Compliance

Answer

Sensitivity labels

Question 3

A multinational corporation must comply with the EU General Data Protection Regulation (GDPR). They need to respond to a data subject access request (DSAR) by searching for personal data across Exchange Online, SharePoint Online, and OneDrive for Business. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Premium). Option D is correct because eDiscovery (Premium) can search across multiple data sources including Exchange, SharePoint, and OneDrive for DSARs. Option A is wrong because Data Lifecycle Management does not search content. Option B is wrong because Audit logs do not provide content search. Option C is wrong because Data Loss Prevention is for preventing data leaks, not searching.

Answer

Data Lifecycle Management

Answer

Audit (Premium)

Answer

Data Loss Prevention (DLP)

Question 4

Refer to the exhibit. A Microsoft Purview Data Loss Prevention (DLP) policy is configured. What does this policy do?

Accepted Answer

It generates an alert if more than 10 emails with the Confidential label are sent to an external recipient.. Option B is correct because the policy alerts when more than 10 emails with the 'Confidential' label are sent to an external recipient. Option A is wrong because it blocks only after 10 emails. Option C is wrong because it monitors external recipients, not internal. Option D is wrong because it does not involve SharePoint.

Answer

It blocks all emails sent to external recipients with the Confidential label.

Answer

It prevents internal users from sending Confidential emails to each other.

Answer

It automatically applies the Confidential label to emails sent to external recipients.

Question 5

Which TWO Microsoft Purview solutions can be used to automatically classify sensitive data at rest?

Accepted Answer

Data Lifecycle Management. Options A and B are correct. Information Protection includes auto-labeling policies that can classify data at rest. Data Lifecycle Management includes retention labels that can classify data based on conditions. Option C is wrong because Communication Compliance monitors communications. Option D is wrong because eDiscovery is for search. Option E is wrong because Auditing tracks activities.

Answer

Communication Compliance

Answer

eDiscovery

Answer

Auditing

Question 6

A company has been fined for failing to respond to a data subject access request (DSAR) within the required timeframe. The compliance team needs to streamline the process of identifying and exporting personal data when a DSAR is received. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview eDiscovery (Premium). Microsoft Purview eDiscovery (Premium) provides advanced search, hold, and export capabilities for responding to DSARs. Data Lifecycle Management handles retention. Communication Compliance monitors communications. Compliance Manager assesses compliance posture but does not handle DSAR workflows.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Lifecycle Management

Question 7

A compliance administrator creates a retention policy as shown in the exhibit. What is the overall effect of this policy on content in SharePoint Online?

Accepted Answer

Content is retained for 7 years and then automatically deleted.. The policy retains content for 7 years from creation and then deletes it. 'RetentionAction' is 'Retain' and 'EndAction' is 'Delete'. Content is not permanently retained forever, nor is it deleted immediately. The policy applies to all locations specified.

Answer

Content is deleted immediately after 7 years from creation.

Answer

Content is automatically labeled after 7 years.

Answer

Content is retained indefinitely after 7 years.

Question 8

Your organization is implementing Microsoft Purview to manage sensitive data. You need to ensure that documents containing credit card numbers are automatically detected and protected. Which Microsoft Purview solution should you configure?

Accepted Answer

Data Loss Prevention (DLP). Option C is correct because Data Loss Prevention (DLP) policies can automatically detect sensitive information like credit card numbers and apply protective actions. Option A is wrong because Information Barriers restrict communication but do not classify content. Option B is wrong because eDiscovery is for legal discovery, not auto-detection. Option D is wrong because Audit logs track activities but do not protect data.

Answer

eDiscovery (Premium)

Answer

Audit (Standard)

Answer

Information Barriers

Question 9

Your organization uses Microsoft Purview to classify data. You need to automatically apply a 'Confidential' label to documents that contain salary information. Which type of sensitivity label configuration should you use?

Accepted Answer

Auto-labeling with sensitive information types. Option B is correct because auto-labeling rules can automatically apply labels based on sensitive information types. Option A is wrong because manual labeling requires user action. Option C is wrong because default labeling applies to new documents but not based on content. Option D is wrong because mandatory labeling requires users to label but does not auto-apply.

Answer

Manual labeling

Answer

Default labeling for SharePoint libraries

Answer

Mandatory labeling policy

Question 10

Your organization wants to automatically retain all customer emails for 7 years and then delete them. Which Microsoft Purview feature should you configure?

Accepted Answer

Data Lifecycle Management retention policy. Option A is correct because Data Lifecycle Management includes retention and deletion policies for Exchange Online. Option B is wrong because Information Protection is about classification. Option C is wrong because Audit is for logging. Option D is wrong because eDiscovery is for search and hold.

Answer

Information Protection sensitivity labels

Answer

Audit log retention

Answer

eDiscovery hold

Question 11

Your organization wants to automatically retain customer emails for 5 years after they are received, and then delete them. You need to configure the appropriate Microsoft Purview solution. What should you use?

Accepted Answer

Retention label published automatically. Option B is correct because retention labels can be applied automatically based on conditions (like emails containing 'customer') and can specify both retention and deletion actions. Option A is wrong because data loss prevention policies prevent sharing but do not handle retention. Option C is wrong because sensitivity labels classify and protect content but do not manage retention. Option D is wrong because eDiscovery is for searching and exporting content, not retention.

Answer

eDiscovery case

Answer

Data loss prevention (DLP) policy

Answer

Sensitivity label

Question 12

Which THREE actions can be performed using a Microsoft Purview Data Loss Prevention (DLP) policy?

Accepted Answer

Notify users via policy tip when they try to share sensitive data. Options A, C, and D are correct. DLP policies can block sharing of sensitive data, notify users with policy tips, and automatically apply sensitivity labels. Option B is wrong because automatic retention is managed by retention policies, not DLP. Option E is wrong because encryption is applied by sensitivity labels, not DLP directly.

Answer

Automatically retain emails for 7 years

Answer

Encrypt emails containing sensitive data

Question 13

An organization must prove to an auditor that only authorized users have accessed sensitive HR files over the past year. The compliance team needs to generate a report of all access events to these files. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Audit (Premium). Microsoft Purview Audit (Premium) logs and allows searching for access events. It provides reports on user activity. Information Protection labels files but does not log access. Data Lifecycle Management handles retention. Compliance Manager assesses compliance but does not provide access logs.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Information Protection

Question 14

A company wants to automatically classify sensitive documents in Microsoft 365 based on credit card numbers and retain them for 7 years. Which two Microsoft Purview solutions should they use together?

Accepted Answer

Sensitivity labels and retention policies. Sensitivity labels classify and protect content, and retention policies ensure data is kept for the required period. Data Loss Prevention (DLP) prevents sharing but does not retain; eDiscovery is for search and export; insider risk management detects risky activities. Therefore, sensitivity labels and retention policies are the correct combination.

Answer

Microsoft Purview compliance portal and Microsoft 365 Defender

Answer

Insider risk management and communication compliance

Answer

Data Loss Prevention (DLP) and eDiscovery

Question 15

Your organization uses Microsoft Purview to label documents. Users report that some documents are automatically labeled as 'Confidential' even though the content is public. Which action should you take to resolve this issue?

Accepted Answer

Review and adjust the auto-labeling rules in the sensitivity label policies. Option B is correct because automatic labeling uses sensitivity label policies and auto-labeling rules to classify content. If incorrectly labeled, the auto-labeling rules or conditions should be reviewed and adjusted. Option A is wrong because disabling auto-labeling removes the feature but does not fix the rule. Option C is wrong because manual labeling requires user action, which may not be desired. Option D is wrong because auditing shows what happened but does not change labeling behavior.

Answer

Enable auditing to track label usage

Answer

Disable auto-labeling in all sensitivity label policies

Answer

Require users to manually apply labels

Question 16

Your organization uses Microsoft Purview Communication Compliance to detect harassing messages. You receive an alert for a message that appears to be a joke between colleagues. What should you do to prevent similar false positives?

Accepted Answer

Refine the policy conditions to exclude certain keywords or users. Option C is correct because you can refine the policy conditions to reduce false positives, such as excluding certain words or users. Option A is wrong because turning off the policy would stop detection entirely. Option B is wrong because training users may not address the policy configuration. Option D is wrong because the correct action is to adjust the policy, not delete it.

Answer

Train users not to joke about sensitive topics

Answer

Delete the alert and ignore future similar messages

Answer

Turn off the policy and use a different solution

Question 17

Refer to the exhibit. You are reviewing a Communication Compliance policy. What does this policy do when a user sends an email containing EU GDPR PII to privacy@contoso.com?

Accepted Answer

It notifies the policy owner and generates a case for investigation.. Option C is correct because the policy actions are to notify the policy owner and generate a case for investigation. Option A is wrong because it does not block the email. Option B is wrong because it does not automatically delete. Option D is wrong because it does not apply a label.

Answer

It blocks the email from being sent.

Answer

It automatically deletes the email after 30 days.

Answer

It applies a sensitivity label to the email.

Question 18

A user accidentally shared a confidential document with an external vendor. You need to revoke access immediately for all copies, even if the file has been downloaded. Which Microsoft Purview feature should you use?

Accepted Answer

Microsoft Purview Information Protection. Option D is correct because Microsoft Purview Information Protection allows the owner to revoke access to protected documents, including downloaded copies. Option A is wrong because DLP policies detect and block sharing but cannot revoke already shared files. Option B is wrong because retention policies manage lifecycle, not revocation. Option C is wrong because audit logs record events but do not enforce revocation.

Answer

Retention policy

Answer

Data loss prevention (DLP) policy

Answer

Audit log search

Question 19

Which TWO Microsoft Purview features allow you to monitor and manage data across hybrid environments (on-premises and cloud)?

Accepted Answer

Microsoft Purview Data Map. Options B and D are correct. Microsoft Purview Data Map provides a unified map of data assets across on-prem and cloud. Microsoft Purview Data Estate Insights gives visibility into data estate health and governance. Option A is wrong because Information Protection is primarily cloud-focused. Option C is wrong because eDiscovery is for search. Option E is wrong because Communication Compliance monitors communications.

Answer

eDiscovery

Answer

Information Protection

Answer

Communication Compliance

Question 20

A company wants to prevent employees from accidentally sharing a document containing personally identifiable information (PII) with external users. The document is stored in OneDrive for Business. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Data Loss Prevention (DLP) policies in Microsoft Purview can detect sensitive content and block sharing with external users. Information Protection labels can classify but rely on DLP to enforce restrictions. Communication Compliance monitors communications. Audit logs record sharing events but do not prevent them.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Information Protection

Answer

Microsoft Purview Audit

SC-900 Practice Exam 52 — 20 Questions

Exhibit

SC-900 Practice Exam 52 — 20 Questions

Exhibit