SC-900 Practice Exam 53 — 20 Questions

Question 1

Refer to the exhibit. A sensitivity label is configured as shown. A user applies the parent label to a document containing credit card numbers. What is the expected behavior?

Accepted Answer

The document gets the parent label's encryption (ViewOnly) and header, but no watermark. The parent label has auto-labeling rules that automatically apply the label when credit card numbers are detected. Since the user manually applied the parent label, auto-labeling is not triggered; the manual label applies. The sublabel is not automatically applied because auto-labeling is configured only on the parent. Therefore, the document gets the parent label's encryption (ViewOnly) and header, but no watermark.

Answer

The document gets the parent label's header and the sublabel's encryption and watermark

Answer

The document gets no protection because credit card numbers are only detected by auto-labeling

Answer

The document gets the parent label's encryption and header, and auto-labeling applies the sublabel

Question 2

A user reports that a sensitive document labeled 'Highly Confidential' was accidentally shared with an external vendor. You need to investigate how the sharing occurred. Which two Microsoft Purview tools should you use together?

Accepted Answer

Audit (Standard) and Content Explorer. Option D is correct because Audit logs track sharing events, and Content Explorer shows where sensitive documents are located. Option A is wrong because DLP would prevent sharing, not investigate. Option B is wrong because eDiscovery is for legal discovery. Option C is wrong because Records Management is for records declaration. Option E is wrong because Insider Risk Management is for risky behavior, not specific document tracking.

Answer

Insider Risk Management and Information Barriers

Answer

eDiscovery (Premium) and Communication Compliance

Answer

Data Loss Prevention and Sensitivity labels

Answer

Records Management and Data Lifecycle Management

Question 3

Your organization has a Microsoft Purview retention policy that retains SharePoint documents for 5 years. After 5 years, you want an administrator to review and approve deletion. Which configuration is required?

Accepted Answer

Configure a disposition review at the end of the retention period. Option D is correct because disposition review allows manual review before permanent deletion. Option A is wrong because automatic deletion would delete without review. Option B is wrong because retention labels can be part of a disposition workflow but disposition review is the specific feature. Option C is wrong because eDiscovery does not manage disposition.

Answer

Apply a retention label and enable disposition review

Answer

Use eDiscovery (Premium) to export and then delete

Answer

Set the retention policy to delete automatically after 5 years

Question 4

Which TWO of the following are Microsoft Purview compliance solutions?

Accepted Answer

Data Loss Prevention (DLP). A, C are correct. Data Loss Prevention (DLP) and eDiscovery are core Purview solutions. B (Microsoft Defender for Cloud) is a security solution. D (Microsoft Entra ID) is identity. E (Microsoft Intune) is endpoint management.

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Answer

Microsoft Defender for Cloud

Question 5

You are investigating a potential data leak. You need to find all emails that contain the word 'confidential' sent to external recipients in the last 30 days. Which Microsoft Purview tool should you use?

Accepted Answer

Content Search. Option C is correct because Content Search in Microsoft Purview can search for specific keywords in emails and filter by date and recipients. Option A is wrong because Audit Log Search tracks activities, not content. Option B is wrong because DLP policies prevent leaks but do not provide historical search. Option D is wrong because Communication Compliance monitors for policy violations but is not optimized for ad-hoc content search.

Answer

Communication Compliance

Answer

Audit Log Search

Answer

Data loss prevention (DLP) policy

Question 6

Refer to the exhibit. A Microsoft Purview DLP policy is configured as shown. What will happen when a user tries to email an external recipient a document containing a credit card number?

Accepted Answer

The email will be blocked and the user will receive a notification. Option A is correct because the policy has actions to block access and notify the user. Option B is wrong because the email is blocked, not quarantined. Option C is wrong because the email is blocked, not sent. Option D is wrong because there is no mention of logging; the policy blocks access.

Answer

The email will be sent but the attachment will be removed

Answer

The email will be delivered and the admin will be alerted

Answer

The email will be sent and the event will be logged for audit

Question 7

Which TWO actions can be performed using Microsoft Purview Data Lifecycle Management?

Accepted Answer

Create a retention policy to keep financial records for 7 years. Data Lifecycle Management allows creating retention policies to keep content for a specified period and deletion policies to remove content after a period. It does not classify content (Information Protection) or monitor communications (Communication Compliance).

Answer

Monitor internal emails for policy violations

Answer

Block sharing of sensitive files with external users

Answer

Automatically classify documents containing PII

Question 8

A compliance officer needs to create a policy that prevents users from sharing files containing medical record numbers (MRN) via email. Which Microsoft Purview solution should they use?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) policies are designed to detect and block sharing of sensitive information like MRNs via email. Sensitivity labels classify content but do not enforce sharing restrictions. Insider risk management and eDiscovery are not for blocking sharing.

Answer

Sensitivity labels

Answer

eDiscovery

Answer

Insider risk management

Question 9

An organization wants to allow users to classify documents as 'Public', 'Internal', 'Confidential', or 'Highly Confidential' with different levels of protection. Which Microsoft Purview solution should they use?

Accepted Answer

Sensitivity labels. Sensitivity labels allow users to manually classify documents with different levels of protection (e.g., encryption, markings). Retention policies manage retention, not classification. DLP prevents data loss. Communication compliance monitors communications.

Answer

Data Loss Prevention (DLP)

Answer

Communication compliance

Answer

Retention policies

Question 10

Your organization is subject to GDPR and must respond to data subject deletion requests within 30 days. You have identified all personal data in Microsoft 365. Which Microsoft Purview solution should you use to permanently delete the data?

Accepted Answer

Data Lifecycle Management (disposition review). Option C is correct because Data Lifecycle Management (disposition review) allows permanent deletion of content after review. Option A is wrong because eDiscovery can export data but not delete. Option B is wrong because DLP prevents data loss, not deletion. Option D is wrong because retention policies keep data, not delete permanently.

Answer

Retention policies to preserve the data

Answer

Data Loss Prevention to block the data

Answer

eDiscovery (Premium) to export the data

Question 11

Your organization uses Microsoft Purview to manage data governance. You need to ensure that sensitive financial data containing credit card numbers is automatically detected and labeled when stored in SharePoint Online. Which compliance solution should you configure?

Accepted Answer

Information Protection auto-labeling. Option B is correct because Microsoft Purview Information Protection includes sensitive information types and auto-labeling policies that can scan and apply sensitivity labels to content in SharePoint Online. Option A is incorrect because Data Lifecycle Management focuses on retention and deletion policies. Option C is incorrect because Audit solutions track activities but do not automatically label content. Option D is incorrect because eDiscovery is for legal holds and searches, not automatic labeling.

Answer

eDiscovery (Premium)

Answer

Data Lifecycle Management

Answer

Audit (Premium)

Question 12

Which THREE of the following are capabilities of Microsoft Purview Information Protection?

Accepted Answer

Auto-labeling for sensitive data. A, C, D are correct. Sensitivity labels, auto-labeling, and encryption are key capabilities. B (retention policies) is Data Lifecycle Management. E (communication monitoring) is Communication Compliance.

Answer

Communication monitoring

Answer

Retention policies

Question 13

Your organization needs to monitor Microsoft Teams chats for inappropriate language and alert compliance officers. Which Microsoft Purview solution should you implement?

Accepted Answer

Communication Compliance. Option B is correct because Communication Compliance is designed to detect offensive language in communications. Option A is wrong because Information Protection classifies data. Option C is wrong because Auditing tracks activities. Option D is wrong because eDiscovery is for legal investigations.

Answer

eDiscovery

Answer

Auditing

Answer

Information Protection

Question 14

A company wants to automatically classify and protect sensitive documents stored in SharePoint Online. The compliance administrator needs to create a policy that detects credit card numbers and applies encryption. Which Microsoft Purview solution should the administrator use?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling in Microsoft Purview Information Protection can automatically classify and encrypt documents containing sensitive data like credit card numbers. Data Lifecycle Management (formerly retention) focuses on retention and deletion, not automatic protection. Communication Compliance monitors communications for policy violations. Microsoft Entra ID is an identity service.

Answer

Communication Compliance

Answer

Microsoft Entra ID

Answer

Data Lifecycle Management

Question 15

Which THREE capabilities are provided by Microsoft Purview Compliance Manager?

Accepted Answer

Pre-built compliance assessments for regulations like GDPR. Compliance Manager provides assessments, actions, and score tracking. It does not discover data (Data Map) or log access (Audit).

Answer

Audit log search for user access events

Answer

Automated data discovery across cloud sources

Question 16

Refer to the exhibit. A Microsoft Purview retention policy is configured as shown. An HR manager wants to ensure that employee records are kept for at least 1 year after last modification. The policy is applied to Exchange, SharePoint, and OneDrive. What is the outcome?

Accepted Answer

The policy will not retain content; it will delete matching content after 365 days, which may not be intended. The policy deletes content 365 days after last modification, but the content query filters only items where Department equals 'HR'. However, SharePoint items do not have a Department property by default; the query may not match any items, so the policy may have no effect. Also, the policy deletes rather than retains; a retention policy should use 'Keep' or 'KeepAndDelete'. The design is flawed.

Answer

Employee records in Exchange are retained for 365 days after last modification, then deleted

Answer

Employee records in SharePoint are deleted after 365 days from last modification if they have Department=HR

Answer

The policy retains content for 365 days and then automatically moves to archive

Question 17

A company must implement data classification labels in Microsoft Purview to protect sensitive information. Which TWO actions are required to create and publish a sensitivity label?

Accepted Answer

Create the label in the Microsoft Purview compliance portal.. Option A is correct because labels are created in the Microsoft Purview compliance portal. Option D is correct because labels must be published via a label policy. Option B is wrong because auto-labeling is a separate feature, not a requirement for creating a label. Option C is wrong because label creation doesn't require scoping. Option E is wrong because labels are not published via Microsoft Intune.

Answer

Deploy the label using Microsoft Intune configuration profiles.

Answer

Define the label scope to include SharePoint and OneDrive.

Answer

Configure auto-labeling rules in Microsoft 365 Defender.

Question 18

Your organization uses Microsoft Purview to classify documents containing health information. You need to ensure that only users with explicit permission can access these documents. Which Microsoft Purview capability should you use?

Accepted Answer

Sensitivity labels with encryption. Option B is correct because sensitivity labels can enforce encryption and permissions. Option A is wrong because DLP blocks sharing but does not manage access. Option C is wrong because audit logs track but do not control access. Option D is wrong because retention policies manage time-based retention, not access.

Answer

Audit logs

Answer

Retention policies

Answer

Data Loss Prevention

Question 19

A company is implementing Microsoft Purview Communication Compliance to detect inappropriate messages. They need to monitor Microsoft Teams channel messages and chat messages for potential policy violations. Which configuration is required?

Accepted Answer

Configure a Communication Compliance policy that includes Teams messages as the supervised communication channel.. Option A is correct because Communication Compliance policies must include a policy condition that selects Teams messages as the source. Option B is wrong because Communication Compliance supports Teams messages natively. Option C is wrong because enabling Teams-only mode is not required. Option D is wrong because Exchange Online retention policies are not needed for Communication Compliance.

Answer

Enable Microsoft Purview Data Loss Prevention (DLP) policies for Teams.

Answer

Set up an Exchange Online retention policy to retain Teams messages.

Answer

Deploy a third-party archiving solution for Teams messages.

Question 20

Which TWO of the following are required to use Microsoft Purview Audit (Premium)?

Accepted Answer

Unified audit log enabled in the Microsoft 365 Defender portal. A, D are correct. Audit (Premium) requires an appropriate license (e.g., E5) and enabling unified audit logging. B (Azure subscription) is not required. C (Microsoft Sentinel) is optional. E (Power BI) is unrelated.

Answer

An Azure subscription for log storage

Answer

Power BI Pro licenses for all users

Answer

Microsoft Sentinel enabled

SC-900 Practice Exam 53 — 20 Questions

Exhibit

SC-900 Practice Exam 53 — 20 Questions

Exhibit