SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 12 — 15 Questions

Question 1

Your company uses Microsoft Purview Communication Compliance to detect and remediate inappropriate messages. You need to create a policy that monitors Microsoft Teams chats for potential harassment. Which type of policy should you create?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Communication Compliance policy. Microsoft Purview Communication Compliance is specifically designed to detect and remediate inappropriate messages, such as harassment, in Microsoft Teams chats and other communication channels. It uses customizable policies to scan for offensive language, sensitive information, or policy violations, enabling organizations to enforce internal compliance rules.

Answer

Data Loss Prevention (DLP) policy

Answer

Information Barriers policy

Answer

Retention policy

Question 2

Your organization is implementing Microsoft Purview to manage data governance. You need to classify sensitive data such as social security numbers automatically. What should you create?

Accepted Answer

Sensitive information type. Sensitive information type. Sensitive information types (SITs) are predefined or custom patterns that detect sensitive data like social security numbers automatically. Option A is incorrect because a data loss prevention (DLP) policy uses SITs to enforce actions, but it does not classify data on its own. Option B is incorrect because retention labels manage data retention and disposal, not classification. Option D is incorrect because trainable classifiers require training with sample data to identify content, whereas SITs use pattern matching out of the box.

Answer

Data loss prevention policy

Answer

Retention label

Answer

Trainable classifier

Question 3

Your organization uses Microsoft Purview eDiscovery to manage legal holds. You need to place a hold on mailboxes and OneDrive accounts for a specific user who is involved in a litigation. Which eDiscovery solution should you use?

Accepted Answer

eDiscovery (Standard). eDiscovery (Standard) is the correct solution because it is designed specifically for legal hold management, allowing you to place a hold on content locations such as mailboxes and OneDrive accounts for a specific user involved in litigation. This hold preserves all content in those locations, including deleted items and versions, until the hold is released. Audit, Communication Compliance, and Content search do not provide the legal hold functionality required for this scenario.

Answer

Audit

Answer

Communication Compliance

Answer

Content search

Question 4

Your organization wants to classify documents based on whether they contain confidential business information like trade secrets. You need to use a classifier that learns from example documents. What should you use?

Accepted Answer

Trainable classifier. A trainable classifier is the correct choice because it uses machine learning to analyze example documents and learn patterns that distinguish content containing confidential business information, such as trade secrets. Unlike predefined sensitive information types, trainable classifiers can be customized to identify unique or proprietary content by training on your specific sample documents. This aligns with the requirement to 'learn from example documents' rather than relying on fixed patterns or exact matches.

Answer

Exact data match

Answer

Data loss prevention policy

Answer

Sensitive information type

Question 5

Your organization uses Microsoft Purview Records Management to manage high-value records that must not be deleted. You need to apply a label that marks content as a regulatory record. What label type should you use?

Accepted Answer

Retention label configured for regulatory records. A retention label configured for regulatory records is the correct choice because it locks the label so that no user, including an administrator, can remove it or reduce the retention period. This meets the requirement to mark content as a regulatory record that must not be deleted, as regulatory records provide the highest level of immutability in Microsoft Purview Records Management.

Answer

Data loss prevention policy

Answer

Retention label configured for record

Answer

Sensitivity label

Question 6

Your organization wants to audit all activities related to accessing sensitive files in Microsoft SharePoint. Which Microsoft Purview solution should you use?

Accepted Answer

Audit (Premium). Audit (Premium) in Microsoft Purview provides detailed logging of user and admin activities, including granular events like file access, modification, and permission changes in SharePoint. This solution enables organizations to investigate and audit all activities related to sensitive files by capturing and retaining audit records with high-volume event support and custom alerting.

Answer

Data lifecycle management

Answer

Information barriers

Answer

Data loss prevention

Question 7

Which TWO Microsoft Purview features can be used to automatically classify and protect sensitive data in documents?

Accepted Answer

Trainable classifiers. Sensitive information types (E) are the built-in or custom pattern-based definitions in Microsoft Purview that automatically detect and classify sensitive data such as credit card numbers, national ID numbers, or health records, making them a core automatic classification mechanism. Trainable classifiers (C) use machine learning to automatically identify and classify sensitive content by category (for example, source code, resumes, or contracts) when pattern matching alone is insufficient. Together, these two features feed the classification engine that can then trigger protection such as encryption or DLP. Data loss prevention policies (A) act on already-classified sensitive data to prevent sharing, but they are a protection/enforcement mechanism rather than a classification feature. eDiscovery (Premium) (B) is used for identifying, collecting, and reviewing content for legal cases, not for automatic classification and protection. Retention labels (D) govern how long content is kept or deleted, which is a lifecycle function, not automatic classification of sensitive data.

Answer

Data loss prevention policies

Answer

eDiscovery (Premium)

Answer

Retention labels

Question 8

Which TWO Microsoft Purview compliance solutions are used to manage data retention and deletion?

Accepted Answer

Data Lifecycle Management. Data Lifecycle Management (A) is correct because it enables organizations to apply retention and deletion policies to content based on its age or classification, automatically managing data across SharePoint, OneDrive, Exchange, and Teams. Records Management (C) is correct because it provides a solution for declaring records, applying retention labels that lock content to prevent modification or deletion, and managing disposition reviews for permanent deletion. Both solutions are part of Microsoft Purview's information governance capabilities, specifically designed to control data retention and deletion.

Answer

Data Loss Prevention

Answer

Communication Compliance

Answer

Audit

Question 9

A compliance administrator configures the above retention policy. A document created on January 1, 2025, in SharePoint Online will be retained until when?

Accepted Answer

December 31, 2025. The retention policy uses the 'When created' trigger, so a document created on January 1, 2025 is retained for 365 days from that date, expiring on December 31, 2025. Option A is incorrect because the retention period is finite. Option B is incorrect because the retention duration is 365 days from creation, not from the end of the year. Option D is incorrect because the retention period does not end on the creation date itself.

Answer

Indefinitely

Answer

January 1, 2026

Answer

January 1, 2025

Question 10

A security analyst runs the above KQL query in Microsoft Sentinel. What is the primary purpose of this query?

Accepted Answer

Identify users with more than 5 MFA failure anomalies in the last 7 days. The KQL query uses `summarize` with `count()` on MFA failure anomalies, then filters with `where count_ > 5` and `where TimeGenerated > ago(7d)`. This explicitly returns only users whose anomaly count exceeds 5 in the last 7 days, making option D correct. The query does not correlate with other events, list all users with any anomaly, or check block status.

Answer

Correlate MFA failures with other security events

Answer

Identify all users who had an MFA failure anomaly in the last 7 days

Answer

Identify users who have been blocked due to MFA failures

Question 11

A compliance administrator creates the above custom sensitive information type for detecting social security numbers (SSNs). What is required for a document to be classified as containing an SSN?

Accepted Answer

The document must contain a pattern matching the SSN regex and at least one keyword. A custom sensitive information type in Microsoft Purview uses a primary element (the SSN regex pattern) and requires at least one supporting element (a keyword) to trigger a match. This ensures that the document is not falsely classified by the regex alone, which could match random number sequences. The compliance administrator configured the type with a minimum count of one keyword as a proximity requirement, so the document must contain both the regex pattern and at least one keyword.

Answer

The document must contain either the SSN regex or a keyword

Answer

The document must contain the SSN regex with high confidence level

Answer

The document must contain a pattern matching the SSN regex and at least two keywords

Question 12

Your organization needs to retain all customer communications data for 7 years due to regulatory requirements. Which Microsoft Purview solution should you use?

Accepted Answer

Microsoft Purview Data Lifecycle Management. Microsoft Purview Data Lifecycle Management (D) is the correct solution because it enables organizations to define retention and deletion policies for data, ensuring that customer communications data is retained for the required 7-year regulatory period and then securely disposed of. This solution directly addresses data retention requirements by applying policies at the workload level (e.g., Exchange Online, SharePoint) to manage the lifecycle of content based on specific rules, such as regulatory compliance.

Answer

Microsoft Purview Audit

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Data Loss Prevention

Question 13

Your organization is implementing Microsoft Purview Information Protection and needs to ensure that files shared externally cannot be forwarded or printed. Which protection mechanism should be applied?

Accepted Answer

Azure Information Protection with rights management. Azure Information Protection with rights management (now part of Microsoft Purview Information Protection) allows you to apply persistent protection that restricts actions like forwarding and printing on files shared externally. This is achieved through Azure Rights Management (Azure RMS) encryption and usage rights, which travel with the file regardless of where it is stored or sent.

Answer

Microsoft Purview Data Lifecycle Management retention policy

Answer

Sensitivity label with user-defined permissions

Answer

DLP policy with block action

Question 14

Your legal team needs to search for all emails from a specific executive that mention a project name 'ProjectX' for a litigation hold. Which Microsoft Purview tool should they use?

Accepted Answer

Microsoft Purview eDiscovery. Microsoft Purview eDiscovery (specifically Content Search or eDiscovery (Premium)) is the correct tool because it is designed to search across Exchange Online mailboxes, SharePoint sites, and other data sources for specific content like emails containing 'ProjectX' from a specific executive. This capability directly supports litigation holds by allowing you to identify, preserve, and export relevant data. Communication Compliance focuses on policy-based detection of inappropriate communications, not ad-hoc searches for litigation.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Audit

Question 15

A company wants to automatically detect and remediate inappropriate messages in Microsoft Teams. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Communication Compliance. Microsoft Purview Communication Compliance is the correct solution because it is specifically designed to detect and remediate inappropriate messages in Microsoft Teams, including offensive language, harassment, and sensitive information. It uses configurable policies to automatically scan messages and apply remediation actions like flagging, notifying managers, or removing content, directly addressing the requirement for automated detection and remediation.

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Data Loss Prevention