SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 12 — 15 Questions

Question 1

A compliance administrator needs to generate a report showing all user activities related to accessing highly sensitive documents in SharePoint. Which Microsoft Purview solution should they use?

Accepted Answer

Audit (Standard or Premium). Option A is correct because Audit logs capture user activities such as access to files. Option B is wrong because DLP is for prevention, not reporting. Option C is wrong because eDiscovery is for content search. Option D is wrong because Communication Compliance is for communications monitoring.

Answer

eDiscovery

Answer

Data Loss Prevention

Answer

Communication Compliance

Question 2

Which TWO of the following are capabilities of Microsoft Purview Information Protection?

Accepted Answer

Applying sensitivity labels to documents and emails. Option A is correct because sensitivity labels are a core part of Information Protection. Option D is correct because encryption with Azure Rights Management is a protection action. Option B is wrong because retention is part of data lifecycle management. Option C is wrong because DLP is a separate solution. Option E is wrong because eDiscovery is for search.

Answer

Searching for content in eDiscovery

Answer

Preventing data loss via policies

Answer

Setting retention periods for content

Question 3

Which THREE of the following are features of Microsoft Purview Compliance Manager?

Accepted Answer

Improvement actions with assigned owners. Option A is correct because Compliance Manager provides a compliance score. Option B is correct because it includes assessments for regulatory standards. Option D is correct because it tracks improvement actions. Option C is wrong because auditing is a separate solution. Option E is wrong because DLP is separate.

Answer

Data Loss Prevention policies

Answer

Audit log search

Question 4

Which TWO of the following are valid uses for Microsoft Purview eDiscovery?

Accepted Answer

Placing legal holds on content. Option A is correct because eDiscovery can search across Exchange, SharePoint, and OneDrive. Option C is correct because eDiscovery supports legal holds. Option B is wrong because DLP is for prevention. Option D is wrong because sensitivity labels are for classification. Option E is wrong because audit logs are for activity tracking.

Answer

Classifying content with sensitivity labels

Answer

Reviewing audit logs for user activity

Answer

Applying retention policies to prevent deletion

Question 5

Refer to the exhibit. An administrator creates a DLP rule as shown. What is the expected outcome when a user tries to share a file containing a U.S. Social Security Number with an external recipient?

Accepted Answer

The sharing is blocked, and the user receives a notification.. Option B is correct because the action is 'BlockAccess' and user notification is enabled, so the user is notified and the action is blocked. Option A is wrong because the rule does not specify 'Override' with justification. Option C is wrong because the rule blocks access, not just logs. Option D is wrong because the rule applies to sharing with external recipients.

Answer

The sharing is blocked only if the user is not the file owner.

Answer

The sharing is allowed, but an audit event is generated.

Answer

The file is shared, but the user is notified and must provide justification.

Question 6

Refer to the exhibit. A sensitivity label is configured as shown. Which statement about the label's behavior is accurate?

Accepted Answer

When applied, users can choose who can access the document and what permissions they have.. Option C is correct because 'ProtectionType' is 'UserDefined', meaning users can specify encryption permissions. Option A is wrong because encryption is enabled, not disabled. Option B is wrong because protection type is user-defined, not predefined. Option D is wrong because the label applies both encryption and marking.

Answer

The label disables encryption and only adds a header and footer.

Answer

The label automatically encrypts the document with a predefined template.

Answer

The label does not apply any protection; it only adds visual markings.

Question 7

An organization uses Microsoft Purview Communication Compliance. They need to monitor Microsoft Teams messages for potential insider trading language. What should they configure?

Accepted Answer

A Communication Compliance policy. Option D is correct because Communication Compliance policies can monitor Teams messages for specific conditions like keywords. Option A is wrong because DLP is for data loss prevention. Option B is wrong because eDiscovery is for search. Option C is wrong because sensitivity labels are for classification.

Answer

An eDiscovery case

Answer

A Data Loss Prevention policy

Answer

A sensitivity label policy

Question 8

Your organization needs to automatically detect and prevent accidental sharing of sensitive data in Microsoft Teams messages. Which Microsoft Purview solution should you use?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) policies in Microsoft Purview can detect and prevent accidental sharing of sensitive information in Teams messages. Option B is correct. Sensitivity labels and retention policies do not provide real-time prevention. eDiscovery is for search and export, not prevention.

Answer

Retention policies

Answer

eDiscovery

Answer

Sensitivity labels

Question 9

Your company is implementing records management for legal retention requirements. Documents must be locked and cannot be modified or deleted after a specific event. Which Microsoft Purview capability should you use?

Accepted Answer

Retention label configured as a regulatory record. A retention label that marks content as a regulatory record locks the content and prevents any modification or deletion. Option D is correct. A retention policy applies to containers, not individual items. A sensitivity label does not enforce immutability. A DLP policy prevents sharing, not modification.

Answer

Retention policy applied to a SharePoint site

Answer

Sensitivity label with encryption

Answer

Data Loss Prevention policy

Question 10

A multinational corporation must comply with GDPR and requires that personal data of EU users be retained for a maximum of 90 days after account closure. After that, all personal data must be permanently deleted. Which combination of Microsoft Purview capabilities should be used?

Accepted Answer

Create a retention label with a retention period of 90 days and then delete the content automatically. A retention label applied automatically can retain data for 90 days, and then a deletion action at the end of the period ensures permanent deletion. Option A is correct. DLP does not handle deletion. eDiscovery is for search, not lifecycle management. Sensitivity labels do not enforce deletion.

Answer

Configure an eDiscovery case to delete content after 90 days

Answer

Apply a sensitivity label that expires after 90 days

Answer

Use a Data Loss Prevention policy to block retention after 90 days

Question 11

Your organization uses Microsoft 365 and wants to classify and protect documents based on their content, such as credit card numbers. Which Microsoft Purview feature automatically classifies content based on sensitive information types?

Accepted Answer

Auto-labeling with sensitivity labels. Auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels based on sensitive information types like credit card numbers. Option A is correct. Unified labeling is the client, not automatic. DLP blocks sharing. eDiscovery searches.

Answer

Data Loss Prevention policy

Answer

Unified labeling client

Answer

eDiscovery

Question 12

Your company uses Microsoft Purview Data Lifecycle Management. You need to ensure that emails in users' mailboxes are retained for 7 years for compliance, but users should be able to delete emails they no longer need before that period. Which configuration achieves this?

Accepted Answer

Apply a retention policy without a preservation lock. A retention policy with preservation lock prevents deletion, but without lock, users can delete items before the retention period ends. Option B is correct. A retention label with record locking prevents deletion. A DLP policy does not manage retention. An eDiscovery hold prevents deletion.

Answer

Configure a Data Loss Prevention policy

Answer

Place a litigation hold on the mailboxes

Answer

Apply a retention label with record locking

Question 13

Your organization uses Microsoft Purview Insider Risk Management. You need to create a policy that detects users exfiltrating sensitive data via email to external recipients. Which policy type should you configure?

Accepted Answer

Data leaks. Data leak policies in Insider Risk Management are designed to detect exfiltration of sensitive data. Option C is correct. Data theft policies focus on theft of intellectual property, not necessarily via email. Security policy violations cover security rule breaches. Offensive language policies deal with harassment.

Answer

Offensive language

Answer

Data theft

Answer

Security policy violations

Question 14

Your organization uses Microsoft Purview Communication Compliance to detect potential policy violations in Microsoft Teams chats. Which action can the policy automatically take when a violation is detected?

Accepted Answer

Notify the user and their manager via email. Communication Compliance policies can automatically take actions like sending a notification to the user or escalating to a manager. Option A is correct. Revoking access or blocking the user is not automatic; a DLP or conditional access policy would be needed. Deleting the message is not an automatic action in Communication Compliance.

Answer

Revoke the user's access to Microsoft Teams

Answer

Block the user from sending messages

Answer

Automatically delete the violating message

Question 15

Your organization uses Microsoft Purview eDiscovery (Premium) to manage a legal case. You need to place a hold on custodians' mailboxes and SharePoint sites to preserve relevant data. Which step must you first take in the eDiscovery workflow?

Accepted Answer

Create a case. In eDiscovery (Premium), you first create a case, then add custodians, and then place holds on their data sources. Option B is correct. Creating a case is the first step. Searching content and collecting to a review set comes after holds. Exporting is the final step.

Answer

Export results

Answer

Create a review set

Answer

Search for content