SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 11 — 15 Questions

Question 1

A company wants to prevent users from sharing files containing personally identifiable information (PII) with external recipients. They also need to notify users if they attempt to share such files. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Data Loss Prevention. Microsoft Purview Data Loss Prevention (DLP) policies can detect sensitive data like PII and block sharing while showing a policy tip to the user. Option A is wrong because sensitivity labels alone do not block sharing. Option B is wrong because eDiscovery is not for prevention. Option D is wrong because Communication Compliance is for inappropriate messages.

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview eDiscovery

Question 2

Which TWO Microsoft Purview solutions are primarily used for investigating and responding to compliance incidents?

Accepted Answer

Microsoft Purview eDiscovery. eDiscovery is used for legal investigations, and Audit is used for investigating user activities. DLP is for prevention, not investigation. Retention is for lifecycle management. Insider Risk Management is for detecting risky activities, but it is more proactive than investigative.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Insider Risk Management

Question 3

Which THREE actions can be performed by Microsoft Purview Data Loss Prevention (DLP) policies?

Accepted Answer

Send notification to users. DLP policies can block sharing, send notifications, and apply encryption (e.g., via sensitivity labels). DLP cannot automatically delete or move files; that is for retention policies. DLP does not create audit reports directly; audit logs are generated by the Audit feature.

Answer

Create audit reports of policy matches

Answer

Automatically delete files containing sensitive data

Question 4

Which TWO Microsoft Purview solutions can help protect sensitive data in Microsoft Teams?

Accepted Answer

Microsoft Purview Data Loss Prevention. DLP can protect sensitive data shared in Teams, and Communication Compliance can detect inappropriate content. eDiscovery is for searching, not protection. Insider Risk Management is for risky behavior. Audit is for logging.

Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Audit

Answer

Microsoft Purview eDiscovery

Question 5

Refer to the exhibit. You are reviewing a Microsoft Purview DLP policy configuration for a compliance team. What is the effect of this policy?

Accepted Answer

The policy blocks access but allows users to override with a justification. The policy contains a BlockAccess action with BlockWithOverride behavior, meaning the action is blocked but the user can override with a business justification. The NotifyUser action sends a custom notification. Option A is wrong because it does not block automatically; it allows override. Option C is wrong because auto-apply is not an action listed. Option D is wrong because encryption is not configured.

Answer

The policy automatically applies encryption to the content

Answer

The policy sends a notification but does not block access

Answer

The policy automatically blocks access without user override

Question 6

Refer to the exhibit. You are analyzing a Microsoft Purview Data Lifecycle Management retention policy. What is the outcome of this policy?

Accepted Answer

Content from the HR department in Exchange and SharePoint is retained for 365 days. The policy has a retention period of 365 days with Keep action, meaning content is kept for 1 year and then no action (since no expiration action is defined). Option A is wrong because retention period is 365 days, not 90. Option B is wrong because the action is Keep, not Delete. Option D is wrong because the query only targets HR department, not all employees.

Answer

Content from the HR department in Exchange and SharePoint is retained for 365 days and then deleted

Answer

Content from the HR department in Exchange and SharePoint is deleted after 90 days

Answer

Content from all employees in Exchange and SharePoint is retained for 365 days

Question 7

Refer to the exhibit. You are reviewing the results of a Microsoft Purview eDiscovery search. Which statement is correct about the search results?

Accepted Answer

The search returned results from both Exchange Online and SharePoint Online. The search results contain both an email and a document, as seen from the sources. Option A is wrong because the document is from SharePoint, not a file server. Option C is wrong because the email does not have an attachment. Option D is wrong because the document is a PowerPoint file, not an email.

Answer

The search only returned results from Exchange Online

Answer

The document is an email message

Answer

The email has an attachment

Question 8

A company is implementing Microsoft Purview to classify sensitive data. They need to automatically detect credit card numbers in emails and apply a retention label. Which solution should they use?

Accepted Answer

Data Loss Prevention (DLP) policies. Option B is correct because Microsoft Purview Data Loss Prevention (DLP) policies can automatically detect sensitive information like credit card numbers and apply actions such as retention labels. Option A is wrong because sensitivity labels are for classifying and protecting data, but they do not automatically detect patterns. Option C is wrong because eDiscovery is for searching content in legal investigations. Option D is wrong because Communication Compliance is for monitoring communications for policy violations, not for automatic classification.

Answer

eDiscovery

Answer

Communication Compliance

Answer

Sensitivity labels

Question 9

An organization uses Microsoft Purview Information Protection. They want to ensure that when a user manually applies a 'Highly Confidential' sensitivity label to a document, the label is automatically applied to any new content pasted from that document into another app. Which configuration should they enable?

Accepted Answer

Marking content as sensitive. Option D is correct because Microsoft Purview Information Protection supports markdown of sensitive content, which tracks the label when content is copied. Option A is wrong because auto-labeling is for automated classification, not manual application. Option B is wrong because encryption is a protection action, not a tracking mechanism. Option C is wrong because DLP policies do not track labels across copy-paste.

Answer

Data Loss Prevention policies

Answer

Encryption with rights management

Answer

Auto-labeling policies

Question 10

A compliance officer needs to search for emails containing trade secrets across all mailboxes in the organization. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Premium). Option A is correct because eDiscovery allows searching across mailboxes and sites for content. Option B is wrong because Audit is for activity logs, not content search. Option C is wrong because DLP is for preventing data loss, not searching. Option D is wrong because Communication Compliance is for monitoring communications for policy violations.

Answer

Communication Compliance

Answer

Data Loss Prevention

Answer

Audit (Standard)

Question 11

Your organization is required to retain all HR-related documents for 7 years after an employee leaves. After that period, the documents must be permanently deleted. Which two Microsoft Purview features should you use together?

Accepted Answer

Retention labels and retention policies. Option B is correct because retention labels can be applied to documents and trigger a retention period, and retention policies enforce the rules at the location level. Option A is wrong because sensitivity labels classify, not retain. Option C is wrong because DLP is for protection, not retention. Option D is wrong because eDiscovery is for search, not retention.

Answer

eDiscovery and audit logs

Answer

DLP policies and sensitivity labels

Answer

Sensitivity labels and auto-labeling

Question 12

Refer to the exhibit. A Microsoft Purview retention policy is configured as shown. Which statement about this policy is accurate?

Accepted Answer

The policy will delete items 7 years after they were last modified.. Option D is correct because the policy uses retention type 'ModificationAgeInDays' with a duration of 2557 days (7 years), meaning items will be deleted 7 years after they were last modified. Option A is wrong because the retention action is 'Delete', not 'Keep'. Option B is wrong because the duration is in days, not years directly. Option C is wrong because the retention type is based on modification age, not creation age.

Answer

The policy will delete items after 7 years from the date they were created.

Answer

The policy will retain items for 7 years from the last modification date.

Answer

The policy will keep items for 7 years and then delete them.

Question 13

A company wants to automatically prevent users from sharing files containing personal data (e.g., passport numbers) via email. Which Microsoft Purview solution should they configure?

Accepted Answer

Data Loss Prevention (DLP). Option C is correct because DLP policies can detect sensitive data and block sharing via email. Option A is wrong because sensitivity labels classify but do not block. Option B is wrong because eDiscovery is for search. Option D is wrong because Communication Compliance monitors messages but does not block based on content.

Answer

Communication Compliance

Answer

Sensitivity labels

Answer

eDiscovery

Question 14

Your organization uses Microsoft Purview to manage records. For legal reasons, you need to preserve all documents related to a specific litigation case and prevent any modification or deletion. Which feature should you use?

Accepted Answer

eDiscovery (Premium) legal hold. Option D is correct because eDiscovery (Premium) allows you to place a legal hold on content. Option A is wrong because DLP is for data loss prevention. Option B is wrong because retention labels retain but do not prevent modification. Option C is wrong because audit logs track activity but do not prevent changes.

Answer

Retention labels

Answer

Data Loss Prevention

Answer

Audit logs

Question 15

An organization uses Microsoft Purview Compliance Manager. They need to track their progress against a specific regulatory standard and assign improvement actions to different teams. Which component should they use?

Accepted Answer

Compliance Manager assessments. Option B is correct because Compliance Manager provides assessments and improvement actions for regulatory standards. Option A is wrong because DLP is for data loss prevention. Option C is wrong because eDiscovery is for search. Option D is wrong because Audit is for logging.

Answer

eDiscovery

Answer

Data Loss Prevention

Answer

Audit logs