SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 12 — 15 Questions

Question 1

A compliance administrator creates the above custom sensitive information type for detecting social security numbers (SSNs). What is required for a document to be classified as containing an SSN?

Accepted Answer

The document must contain a pattern matching the SSN regex and at least one keyword. A custom sensitive information type in Microsoft Purview uses a primary element (the SSN regex pattern) and requires at least one supporting element (a keyword) to trigger a match. This ensures that the document is not falsely classified by the regex alone, which could match random number sequences. The compliance administrator configured the type with a minimum count of one keyword as a proximity requirement, so the document must contain both the regex pattern and at least one keyword.

Answer

The document must contain either the SSN regex or a keyword

Answer

The document must contain the SSN regex with high confidence level

Answer

The document must contain a pattern matching the SSN regex and at least two keywords

Question 2

Your organization needs to retain all customer communications data for 7 years due to regulatory requirements. Which Microsoft Purview solution should you use?

Accepted Answer

Microsoft Purview Data Lifecycle Management. Microsoft Purview Data Lifecycle Management (D) is the correct solution because it enables organizations to define retention and deletion policies for data, ensuring that customer communications data is retained for the required 7-year regulatory period and then securely disposed of. This solution directly addresses data retention requirements by applying policies at the workload level (e.g., Exchange Online, SharePoint) to manage the lifecycle of content based on specific rules, such as regulatory compliance.

Answer

Microsoft Purview Audit

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Data Loss Prevention

Question 3

A compliance officer wants to automatically classify emails containing credit card numbers as 'Highly Confidential' and apply encryption. Which Microsoft Purview feature should be used?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) policies are designed to detect sensitive information such as credit card numbers and automatically apply protective actions like encryption. Option A is incorrect because sensitivity labels are classification tools that can be applied manually or automatically via DLP, but the automation of encryption based on content is a DLP capability. Option B is incorrect because retention labels are used for data retention and deletion policies, not for encryption. Option C is incorrect because eDiscovery is used for searching and exporting data for legal or investigative purposes, not for automatic classification and encryption.

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Purview Retention Labels

Answer

Microsoft Purview eDiscovery

Question 4

Your organization is implementing Microsoft Purview Information Protection and needs to ensure that files shared externally cannot be forwarded or printed. Which protection mechanism should be applied?

Accepted Answer

Azure Information Protection with rights management. Azure Information Protection with rights management (now part of Microsoft Purview Information Protection) allows you to apply persistent protection that restricts actions like forwarding and printing on files shared externally. This is achieved through Azure Rights Management (Azure RMS) encryption and usage rights, which travel with the file regardless of where it is stored or sent.

Answer

Microsoft Purview Data Lifecycle Management retention policy

Answer

Sensitivity label with user-defined permissions

Answer

DLP policy with block action

Question 5

Your legal team needs to search for all emails from a specific executive that mention a project name 'ProjectX' for a litigation hold. Which Microsoft Purview tool should they use?

Accepted Answer

Microsoft Purview eDiscovery. Microsoft Purview eDiscovery (specifically Content Search or eDiscovery (Premium)) is the correct tool because it is designed to search across Exchange Online mailboxes, SharePoint sites, and other data sources for specific content like emails containing 'ProjectX' from a specific executive. This capability directly supports litigation holds by allowing you to identify, preserve, and export relevant data. Communication Compliance focuses on policy-based detection of inappropriate communications, not ad-hoc searches for litigation.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Audit

Question 6

A company wants to automatically detect and remediate inappropriate messages in Microsoft Teams. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Communication Compliance. Microsoft Purview Communication Compliance is the correct solution because it is specifically designed to detect and remediate inappropriate messages in Microsoft Teams, including offensive language, harassment, and sensitive information. It uses configurable policies to automatically scan messages and apply remediation actions like flagging, notifying managers, or removing content, directly addressing the requirement for automated detection and remediation.

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Data Loss Prevention

Question 7

Your organization uses Microsoft Purview to manage data classification. You need to ensure that a specific Azure Blob Storage account is automatically classified for sensitivity labels. Which step is required?

Accepted Answer

Register the storage account in Microsoft Purview Data Map and configure scanning. Microsoft Purview Data Map scans Azure Blob Storage and can auto-classify files based on built-in or custom classifiers. Option B is wrong because creating a sensitivity label and publishing it does not automatically classify the storage account; you need to register and scan it. Option C is wrong because DLP policies do not classify storage accounts directly. Option D is wrong because 'enabling Microsoft Purview Information Protection for Azure' is not a required configuration step for automatic classification of a specific storage account; automatic classification relies on registering the storage account in Microsoft Purview Data Map and configuring a scan, then applying auto-labeling policies.

Answer

Create a sensitivity label and publish it to all users

Answer

Apply a DLP policy to the storage account

Answer

Enable Microsoft Purview Information Protection for Azure

Question 8

A user receives a sensitivity label that automatically marks the email as 'Confidential' and prevents forwarding. The label was applied without user intervention. Which mechanism most likely applied the label?

Accepted Answer

Auto-classification via DLP policy. Auto-classification via DLP policy can automatically apply sensitivity labels based on sensitive content, such as credit card numbers, enabling the label to be applied without user intervention. Option A is incorrect because the Azure Information Protection file policy applies to files in Windows File Explorer, not emails. Option C is incorrect because a default label applies to all unlabeled emails but does not use content detection. Option D is incorrect because manual labeling requires the user to select the label.

Answer

Azure Information Protection file policy

Answer

Default label configured in Microsoft 365

Answer

Manual labeling by the user

Question 9

Your organization needs to audit all changes to sensitive files in SharePoint Online for at least 180 days. Which Microsoft Purview feature should be enabled?

Accepted Answer

Microsoft Purview Audit (Premium). Microsoft Purview Audit (Premium) provides the extended retention of audit logs (up to 10 years) and the ability to search for high-value events such as changes to sensitive files. For a requirement of at least 180 days, Audit (Premium) is necessary because standard audit logs are retained for only 90 days. This feature logs all modifications to SharePoint Online files, including who changed what and when, meeting the auditing requirement.

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Data Lifecycle Management

Question 10

A company wants to prevent users from sharing files containing personally identifiable information (PII) with external recipients. They also need to notify users if they attempt to share such files. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Data Loss Prevention. Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect, prevent, and notify users about the sharing of sensitive data, such as personally identifiable information (PII), with external recipients. DLP policies can be configured to automatically block the sharing of files containing PII and display a policy tip notification to the user when they attempt to share such content.

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview eDiscovery

Question 11

Which THREE actions can be performed by Microsoft Purview Data Loss Prevention (DLP) policies?

Accepted Answer

Send notification to users. Microsoft Purview DLP policies can send email notifications to users when a policy match occurs, alerting them to potential policy violations and providing guidance on proper data handling. This is a core end-user notification feature that helps educate users and reduce accidental data leaks.

Answer

Create audit reports of policy matches

Answer

Automatically delete files containing sensitive data

Question 12

Which TWO Microsoft Purview solutions can help protect sensitive data in Microsoft Teams?

Accepted Answer

Microsoft Purview Data Loss Prevention. DLP can protect sensitive data shared in Teams, and Communication Compliance can detect inappropriate content. eDiscovery is for searching, not protection. Insider Risk Management is for risky behavior. Audit is for logging.

Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Audit

Answer

Microsoft Purview eDiscovery

Question 13

Refer to the exhibit. You are reviewing a Microsoft Purview DLP policy configuration for a compliance team. What is the effect of this policy?

Accepted Answer

The policy blocks access but allows users to override with a justification. The policy includes a BlockAccess action with behavior set to BlockWithOverride, meaning the action is blocked by default but the user can override with a business justification. Additionally, the NotifyUser action sends a custom notification to the user. This matches Option A. Option B is incorrect because there is no encryption action configured. Option C is incorrect because the policy does block access (with override), not just send a notification. Option D is incorrect because the policy allows user override, so it does not automatically block without override.

Answer

The policy automatically applies encryption to the content

Answer

The policy sends a notification but does not block access

Answer

The policy automatically blocks access without user override

Question 14

Refer to the exhibit. You are analyzing a Microsoft Purview Data Lifecycle Management retention policy. What is the outcome of this policy?

Accepted Answer

Content from the HR department in Exchange and SharePoint is retained for 365 days and then deleted. The exhibit shows a Microsoft Purview Data Lifecycle Management retention policy scoped to the HR department with a retention period of 365 days and a deletion action at the end. Therefore, content from the HR department in Exchange and SharePoint is retained for 365 days and then deleted, matching option A.

Answer

Content from the HR department in Exchange and SharePoint is deleted after 90 days

Answer

Content from all employees in Exchange and SharePoint is retained for 365 days

Answer

Content from the HR department in Exchange and SharePoint is retained for 365 days

Question 15

Refer to the exhibit. You are reviewing the results of a Microsoft Purview eDiscovery search. Which statement is correct about the search results?

Accepted Answer

The search returned results from both Exchange Online and SharePoint Online. The search results show items from both Exchange Online (email messages) and SharePoint Online (documents), as indicated by the 'Location' column listing both 'Exchange Online' and 'SharePoint Online' sources. This confirms that the eDiscovery search was configured to search across multiple workloads, returning results from both platforms.

Answer

The search only returned results from Exchange Online

Answer

The document is an email message

Answer

The email has an attachment