SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 13 — 15 Questions

Question 1

A user receives a sensitivity label that automatically marks the email as 'Confidential' and prevents forwarding. The label was applied without user intervention. Which mechanism most likely applied the label?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Auto-classification via DLP policy. Auto-classification via DLP policy can automatically apply sensitivity labels based on sensitive content, such as credit card numbers, enabling the label to be applied without user intervention. Option A is incorrect because the Azure Information Protection file policy applies to files in Windows File Explorer, not emails. Option C is incorrect because a default label applies to all unlabeled emails but does not use content detection. Option D is incorrect because manual labeling requires the user to select the label.

Answer

Azure Information Protection file policy

Answer

Default label configured in Microsoft 365

Answer

Manual labeling by the user

Question 2

Your organization needs to audit all changes to sensitive files in SharePoint Online for at least 180 days. Which Microsoft Purview feature should be enabled?

Accepted Answer

Microsoft Purview Audit (Premium). Microsoft Purview Audit (Premium) provides the extended retention of audit logs (up to 10 years) and the ability to search for high-value events such as changes to sensitive files. For a requirement of at least 180 days, Audit (Premium) is necessary because standard audit logs are retained for only 90 days. This feature logs all modifications to SharePoint Online files, including who changed what and when, meeting the auditing requirement.

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Data Lifecycle Management

Question 3

A company wants to prevent users from sharing files containing personally identifiable information (PII) with external recipients. They also need to notify users if they attempt to share such files. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Data Loss Prevention. Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect, prevent, and notify users about the sharing of sensitive data, such as personally identifiable information (PII), with external recipients. DLP policies can be configured to automatically block the sharing of files containing PII and display a policy tip notification to the user when they attempt to share such content.

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview eDiscovery

Question 4

Refer to the exhibit. You are reviewing a Microsoft Purview DLP policy configuration for a compliance team. What is the effect of this policy?

Accepted Answer

The policy blocks access but allows users to override with a justification. The policy includes a BlockAccess action with behavior set to BlockWithOverride, meaning the action is blocked by default but the user can override with a business justification. Additionally, the NotifyUser action sends a custom notification to the user. This matches Option A. Option B is incorrect because there is no encryption action configured. Option C is incorrect because the policy does block access (with override), not just send a notification. Option D is incorrect because the policy allows user override, so it does not automatically block without override.

Answer

The policy automatically applies encryption to the content

Answer

The policy sends a notification but does not block access

Answer

The policy automatically blocks access without user override

Question 5

You are analyzing a Microsoft Purview Data Lifecycle Management retention policy scoped to the HR department. The policy has a retention period of 365 days and a deletion action at the end of the retention period. What is the outcome of this policy?

Accepted Answer

Content from the HR department in Exchange and SharePoint is retained for 365 days and then deleted. The policy is scoped to the HR department and has a retention period of 365 days with a deletion action at the end. Therefore, content from the HR department in Exchange and SharePoint is retained for 365 days and then deleted, matching option A.

Answer

Content from the HR department in Exchange and SharePoint is deleted after 90 days

Answer

Content from all employees in Exchange and SharePoint is retained for 365 days

Answer

Content from the HR department in Exchange and SharePoint is retained for 365 days

Question 6

Refer to the exhibit. You are reviewing the results of a Microsoft Purview eDiscovery search. Which statement is correct about the search results?

Accepted Answer

The search returned results from both Exchange Online and SharePoint Online. The search results show items from both Exchange Online (email messages) and SharePoint Online (documents), as indicated by the 'Location' column listing both 'Exchange Online' and 'SharePoint Online' sources. This confirms that the eDiscovery search was configured to search across multiple workloads, returning results from both platforms.

Answer

The search only returned results from Exchange Online

Answer

The document is an email message

Answer

The email has an attachment

Question 7

An organization uses Microsoft Purview Information Protection. They want to ensure that when a user manually applies a 'Highly Confidential' sensitivity label to a document, the label is automatically applied to any new content pasted from that document into another app. Which configuration should they enable?

Accepted Answer

Marking content as sensitive. Microsoft Purview Information Protection's 'marking content as sensitive' feature (also known as content marking) ensures that when a user manually applies a sensitivity label, the label is automatically applied to any new content pasted from that document into another app. This is achieved through automatic marking that tracks the label even when content is copied. Option B (Data Loss Prevention policies) is incorrect because DLP policies enforce rules to prevent data loss but do not automatically apply labels to copied content. Option C (Encryption with rights management) is incorrect because encryption protects content but does not propagate labels across copy-paste. Option D (Auto-labeling policies) is incorrect because auto-labeling automatically classifies content based on conditions, not manual application.

Answer

Data Loss Prevention policies

Answer

Encryption with rights management

Answer

Auto-labeling policies

Question 8

A compliance officer needs to search for emails containing trade secrets across all mailboxes in the organization. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Premium). eDiscovery (Premium) is the correct solution because it is specifically designed for legal and investigative searches across all mailboxes, including the ability to search for specific content like trade secrets using keyword queries and advanced features like predictive coding and review sets. It supports searching across Exchange Online mailboxes, SharePoint sites, and OneDrive for Business, making it ideal for a compliance officer conducting a broad, targeted search for sensitive information.

Answer

Communication Compliance

Answer

Data Loss Prevention

Answer

Audit (Standard)

Question 9

Your organization is required to retain all HR-related documents for 7 years after an employee leaves. After that period, the documents must be permanently deleted. Which two Microsoft Purview features should you use together?

Accepted Answer

Retention labels and retention policies. Retention labels and retention policies (option D) are the correct combination because retention labels can be applied to individual HR documents to trigger deletion 7 years after an event such as an employee's departure, while retention policies apply retention and deletion settings broadly across workloads. Together they ensure documents are kept for the required period and then permanently deleted. eDiscovery and audit logs (A) are for investigation and monitoring, not enforcement of retention/deletion. DLP policies and sensitivity labels (B), and sensitivity labels with auto-labeling (C), focus on classification and preventing data loss, not on time-based retention and deletion.

Answer

eDiscovery and audit logs

Answer

DLP policies and sensitivity labels

Answer

Sensitivity labels and auto-labeling

Question 10

Refer to the exhibit. A Microsoft Purview retention policy is configured as shown. Which statement about this policy is accurate?

Accepted Answer

The policy will delete items 7 years after they were last modified.. The exhibit shows a retention policy configured with the action 'Delete items' and a period of '7 years' based on 'When items were last modified.' This means the policy will delete items 7 years after their last modification date, not from creation. Option C correctly states this behavior.

Answer

The policy will delete items after 7 years from the date they were created.

Answer

The policy will retain items for 7 years from the last modification date.

Answer

The policy will keep items for 7 years and then delete them.

Question 11

A company wants to automatically prevent users from sharing files containing personal data (e.g., passport numbers) via email. Which Microsoft Purview solution should they configure?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect and automatically block the sharing of sensitive information, such as passport numbers, via email. DLP policies use deep content analysis (e.g., regular expressions, keyword matching, and data classification) to inspect email attachments and body text in transit, and can enforce actions like blocking the message or sending a policy tip to the user. This aligns directly with the requirement to prevent users from sharing files containing personal data through email.

Answer

Communication Compliance

Answer

Sensitivity labels

Answer

eDiscovery

Question 12

Your organization uses Microsoft Purview to manage records. For legal reasons, you need to preserve all documents related to a specific litigation case and prevent any modification or deletion. Which feature should you use?

Accepted Answer

eDiscovery (Premium) legal hold. eDiscovery (Premium) legal hold is the correct feature because it preserves content in-place by placing a hold on data sources (e.g., Exchange mailboxes, SharePoint sites, OneDrive accounts) associated with a specific litigation case. This prevents any modification or deletion of documents while the hold is active, ensuring compliance with legal preservation requirements. Unlike retention labels, which manage lifecycle policies, legal hold is designed specifically for litigation scenarios to freeze data immutably.

Answer

Retention labels

Answer

Data Loss Prevention

Answer

Audit logs

Question 13

An organization uses Microsoft Purview Compliance Manager. They need to track their progress against a specific regulatory standard and assign improvement actions to different teams. Which component should they use?

Accepted Answer

Compliance Manager assessments. Compliance Manager assessments are the correct component because they allow you to track progress against a specific regulatory standard (e.g., ISO 27001, SOC 2) by creating an assessment that maps controls to that standard. Improvement actions are the granular tasks within an assessment that can be assigned to different teams for remediation, directly supporting the need to track progress and assign work.

Answer

eDiscovery

Answer

Data Loss Prevention

Answer

Audit logs

Question 14

A compliance administrator needs to generate a report showing all user activities related to accessing highly sensitive documents in SharePoint. Which Microsoft Purview solution should they use?

Accepted Answer

Audit (Standard or Premium). Audit (Standard or Premium) logs and records all user activities, including access to highly sensitive documents in SharePoint. Audit (Premium) provides deeper visibility with events like 'FileAccessed' and 'SensitivityLabelApplied', enabling compliance administrators to generate detailed reports on who accessed sensitive content and when.

Answer

eDiscovery

Answer

Data Loss Prevention

Answer

Communication Compliance

Question 15

Which TWO of the following are capabilities of Microsoft Purview Information Protection?

Accepted Answer

Applying sensitivity labels to documents and emails. Microsoft Purview Information Protection (MIP) focuses on classifying, labeling, and protecting sensitive data. Applying sensitivity labels to documents and emails (Option D) is a core MIP capability, as labels enforce protection actions like encryption or visual markings. Encrypting content with Azure Rights Management (Option E) is the underlying technology that MIP uses to apply persistent protection, making it a direct capability of the solution.

Answer

Searching for content in eDiscovery

Answer

Preventing data loss via policies

Answer

Setting retention periods for content