SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 10 — 15 Questions

Question 1

Your organization wants to audit all activities related to accessing sensitive files in Microsoft SharePoint. Which Microsoft Purview solution should you use?

Accepted Answer

Audit (Premium). Option C is correct because Audit (Premium) provides detailed logging of activities. Option A is wrong because DLP policies protect data. Option B is wrong because retention policies manage lifecycle. Option D is wrong because information barriers restrict communication.

Answer

Data lifecycle management

Answer

Information barriers

Answer

Data loss prevention

Question 2

Which TWO Microsoft Purview features can be used to automatically classify and protect sensitive data in documents?

Accepted Answer

Trainable classifiers. Trainable classifiers (C) use machine learning to intelligently identify sensitive content based on context and patterns, enabling automatic classification. Sensitive information types (E) are predefined or custom patterns (e.g., credit card numbers, SSNs) that detect specific data types, which can then trigger protection actions like encryption or access restrictions. Both features work together to automatically classify and protect sensitive data in documents.

Answer

Data loss prevention policies

Answer

eDiscovery (Premium)

Answer

Retention labels

Question 3

Which THREE actions can Microsoft Purview Data Loss Prevention (DLP) policies perform when a sensitive data match is detected?

Accepted Answer

Encrypt the content automatically. Microsoft Purview DLP policies can automatically encrypt content when a sensitive data match is detected, typically using Azure Information Protection (AIP) or Microsoft 365 Message Encryption. This action helps protect the data by restricting access to authorized users only, even if the content is shared externally.

Answer

Apply a retention label

Answer

Delete the content permanently

Question 4

Which TWO Microsoft Purview compliance solutions are used to manage data retention and deletion?

Accepted Answer

Data Lifecycle Management. Data Lifecycle Management (A) is correct because it enables organizations to apply retention and deletion policies to content based on its age or classification, automatically managing data across SharePoint, OneDrive, Exchange, and Teams. Records Management (C) is correct because it provides a solution for declaring records, applying retention labels that lock content to prevent modification or deletion, and managing disposition reviews for permanent deletion. Both solutions are part of Microsoft Purview's information governance capabilities, specifically designed to control data retention and deletion.

Answer

Data Loss Prevention

Answer

Communication Compliance

Answer

Audit

Question 5

A compliance administrator configures the above retention policy. A document created on January 1, 2025, in SharePoint Online will be retained until when?

Accepted Answer

December 31, 2025. Option D is correct because the policy retains for 365 days from creation date (WhenCreated). January 1, 2025 + 365 days = December 31, 2025. Option A is wrong because it ignores the retention trigger. Option B is wrong because retention is not indefinite. Option C is wrong because the duration is 365 days, not 365 days from end of year.

Answer

Indefinitely

Answer

January 1, 2026

Answer

January 1, 2025

Question 6

A security analyst runs the above KQL query in Microsoft Sentinel. What is the primary purpose of this query?

Accepted Answer

Identify users with more than 5 MFA failure anomalies in the last 7 days. Option B is correct because the query counts alerts per user and filters for >5, indicating users with excessive MFA failures. Option A is wrong because it doesn't list all alerts. Option C is wrong because it doesn't correlate with other sources. Option D is wrong because it doesn't identify blocked users.

Answer

Correlate MFA failures with other security events

Answer

Identify all users who had an MFA failure anomaly in the last 7 days

Answer

Identify users who have been blocked due to MFA failures

Question 7

A compliance administrator creates the above custom sensitive information type for detecting social security numbers (SSNs). What is required for a document to be classified as containing an SSN?

Accepted Answer

The document must contain a pattern matching the SSN regex and at least one keyword. Option A is correct because the pattern requires both a regex match (IdMatch) and at least one keyword (Any minMatches=1). Option B is wrong because it only needs one keyword. Option C is wrong because confidence level is just metadata. Option D is wrong because it requires both regex and keyword.

Answer

The document must contain either the SSN regex or a keyword

Answer

The document must contain the SSN regex with high confidence level

Answer

The document must contain a pattern matching the SSN regex and at least two keywords

Question 8

Your organization needs to retain all customer communications data for 7 years due to regulatory requirements. Which Microsoft Purview solution should you use?

Accepted Answer

Microsoft Purview Data Lifecycle Management. Microsoft Purview Data Lifecycle Management (formerly Records Management) enables retention policies and retention labels to retain data for a specified period. Option A is wrong because eDiscovery is for search and export, not retention. Option B is wrong because Audit is for logging activities. Option D is wrong because Data Loss Prevention prevents data leaks, not retention.

Answer

Microsoft Purview Audit

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Data Loss Prevention

Question 9

A compliance officer wants to automatically classify emails containing credit card numbers as 'Highly Confidential' and apply encryption. Which Microsoft Purview feature should be used?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) policies can detect sensitive information like credit card numbers and automatically apply actions such as encryption. Option A is wrong because Sensitivity labels are manually applied or auto-classified via DLP, but DLP itself triggers the action. Option B is wrong because retention labels are for retention, not encryption. Option D is wrong because eDiscovery is for search and export.

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Purview Retention Labels

Answer

Microsoft Purview eDiscovery

Question 10

Your organization is implementing Microsoft Purview Information Protection and needs to ensure that files shared externally cannot be forwarded or printed. Which protection mechanism should be applied?

Accepted Answer

Azure Information Protection with rights management. Azure Information Protection (AIP) unified labeling client with rights management can restrict actions like forward and print when a sensitivity label is applied. Option B is wrong because DLP policies block sharing but do not enforce usage restrictions after sharing. Option C is wrong because cipher suites are for encryption algorithms, not granular permissions. Option D is wrong because retention policies do not control usage rights.

Answer

Microsoft Purview Data Lifecycle Management retention policy

Answer

Sensitivity label with user-defined permissions

Answer

DLP policy with block action

Question 11

Your legal team needs to search for all emails from a specific executive that mention a project name 'ProjectX' for a litigation hold. Which Microsoft Purview tool should they use?

Accepted Answer

Microsoft Purview eDiscovery. Microsoft Purview eDiscovery (Standard or Premium) allows searching across Exchange, SharePoint, etc. for specific keywords and custodians. Option A is wrong because Audit only shows activity logs, not content. Option B is wrong because DLP is for policy enforcement. Option D is wrong because Communication Compliance monitors communications for policy violations, not litigation searches.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Audit

Question 12

A company wants to automatically detect and remediate inappropriate messages in Microsoft Teams. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Communication Compliance. Microsoft Purview Communication Compliance helps detect offensive language, harassment, and policy violations in Teams, Exchange, etc. Option A is wrong because eDiscovery is for searching content. Option B is wrong because DLP is for sensitive data, not inappropriate language. Option D is wrong because Insider Risk Management focuses on data theft and leaks.

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Data Loss Prevention

Question 13

Your organization uses Microsoft Purview to manage data classification. You need to ensure that a specific Azure Blob Storage account is automatically classified for sensitivity labels. Which step is required?

Accepted Answer

Register the storage account in Microsoft Purview Data Map and configure scanning. Microsoft Purview Data Map scans Azure Blob Storage and can auto-classify files based on built-in or custom classifiers. Option B is wrong because DLP policies do not classify storage accounts directly. Option C is wrong because sensitivity labels are not auto-applied to storage without the scanner. Option D is wrong because Information Protection is for files in Office 365, not Azure storage.

Answer

Create a sensitivity label and publish it to all users

Answer

Apply a DLP policy to the storage account

Answer

Enable Microsoft Purview Information Protection for Azure

Question 14

A user receives a sensitivity label that automatically marks the email as 'Confidential' and prevents forwarding. The label was applied without user intervention. Which mechanism most likely applied the label?

Accepted Answer

Auto-classification via DLP policy. Auto-classification via DLP policy can automatically apply sensitivity labels based on sensitive content. Option B is wrong because manual labeling requires user action. Option C is wrong because file policy is for Windows File Explorer. Option D is wrong because default label applies to unlabeled emails by default, but the scenario suggests the label was applied based on content.

Answer

Azure Information Protection file policy

Answer

Default label configured in Microsoft 365

Answer

Manual labeling by the user

Question 15

Your organization needs to audit all changes to sensitive files in SharePoint Online for at least 180 days. Which Microsoft Purview feature should be enabled?

Accepted Answer

Microsoft Purview Audit (Premium). Microsoft Purview Audit (Standard) retains audit logs for 90 days, but Audit (Premium) can retain for up to 1 year (or longer via custom retention). Option A is wrong because DLP does not audit changes. Option C is wrong because eDiscovery is for searching, not auditing. Option D is wrong because Data Lifecycle Management is for retention of content, not logs.

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Data Lifecycle Management