SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 14 — 15 Questions

Question 1

Your organization is implementing Microsoft Purview Communication Compliance to detect potential regulatory violations. You need to configure a policy that alerts when employees discuss insider trading in emails and Microsoft Teams messages. The solution should minimize false positives. Which action should you take?

Accepted Answer

Use a trainable classifier and train it with sample data. Option B is correct because training trainable classifiers with relevant sample data improves accuracy and reduces false positives. Option A is wrong because increasing the sensitivity threshold reduces alerts, increasing false negatives. Option C is wrong because including all messages increases noise. Option D is wrong because a global keyword list is less accurate than a trainable classifier.

Answer

Include all message types without filtering

Answer

Create a global keyword list of insider trading terms

Answer

Set the policy sensitivity threshold to 90%

Question 2

Which TWO of the following are capabilities of Microsoft Purview that help organizations manage compliance? (Choose two.)

Accepted Answer

Data Loss Prevention (DLP). Option A is correct because Data Loss Prevention is a key compliance capability. Option B is correct because Insider Risk Management helps detect and manage insider risks. Option C is wrong because Microsoft Entra ID is an identity service, not a compliance solution. Option D is wrong because Microsoft Defender for Cloud is a cloud security posture management solution. Option E is wrong because Microsoft Intune is a device management solution.

Answer

Microsoft Entra ID

Answer

Microsoft Defender for Cloud

Answer

Microsoft Intune

Question 3

Which THREE of the following are features of Microsoft Purview Communication Compliance? (Choose three.)

Accepted Answer

Detect offensive language in emails and Teams messages. Option A is correct because Communication Compliance can detect inappropriate language. Option B is correct because it can monitor for regulatory compliance. Option C is correct because it can analyze content with trainable classifiers. Option D is wrong because DLP is a separate solution. Option E is wrong because eDiscovery is a separate solution.

Answer

Prevent data loss by blocking sensitive data

Answer

Search for content across Exchange, SharePoint, and Teams

Question 4

Which TWO of the following are types of retention actions available in Microsoft Purview? (Choose two.)

Accepted Answer

Retain data for a specified period. Option A is correct because a retention policy can retain data for a specific period. Option D is correct because a retention policy can delete data after a specific period. Option B is wrong because encryption is not a retention action. Option C is wrong because classification is done by sensitivity labels. Option E is wrong because eDiscovery is a search tool.

Answer

Encrypt data at rest

Answer

Classify data as confidential

Answer

Search for data using eDiscovery

Question 5

Your organization is implementing a data loss prevention (DLP) policy to prevent sensitive data from being shared via email. Users in the finance department need to send financial reports to external auditors. What should you configure?

Accepted Answer

Configure a DLP policy with an override option allowing users to justify the sharing. Option C is correct because DLP policies can be configured with overrides that allow users to justify the action, which is appropriate for legitimate business needs. Option A is wrong because a block action would prevent all sharing. Option B is wrong because an allow list is not a standard DLP configuration. Option D is wrong because sensitivity labels are used for classification, not DLP actions.

Answer

Add the auditors' domains to a DLP allow list

Answer

Assign a sensitivity label that automatically encrypts the email

Answer

Configure a DLP policy with a block action for all external sharing

Question 6

A company uses Microsoft Purview Information Protection to classify and protect sensitive data. They want to automatically apply a sensitivity label to documents containing credit card numbers. Which should you configure?

Accepted Answer

Configure an auto-labeling policy with a sensitive info type for credit card numbers. Option B is correct because auto-labeling policies can automatically apply sensitivity labels based on sensitive information types like credit card numbers. Option A is wrong because trainable classifiers are for more complex patterns. Option C is wrong because manual labeling requires user action. Option D is wrong because activity explorer is a monitoring tool.

Answer

Use a manual labeling policy requiring users to apply labels

Answer

Create a trainable classifier for credit card patterns

Answer

Set up a data classification activity explorer to monitor credit card usage

Question 7

Your organization uses Microsoft Purview Audit to investigate a security incident. You need to search for activities performed by a specific user over the past 90 days. Which solution should you use?

Accepted Answer

Microsoft Purview Audit (Standard). Option C is correct because Audit (Standard) provides 90-day retention for audit logs. Option A is wrong because Audit (Premium) provides longer retention but is not required. Option B is wrong because Content Search is for eDiscovery. Option D is wrong because Advanced Hunting is for Microsoft 365 Defender.

Answer

Microsoft Purview Audit (Premium)

Answer

Microsoft Defender XDR Advanced Hunting

Answer

Microsoft Purview eDiscovery (Standard)

Question 8

Refer to the exhibit. A Microsoft Purview retention policy is configured as shown. A document in SharePoint is labeled as 'Highly Confidential' and was created 5 years ago. What will happen to this document?

Accepted Answer

The document will be retained for 2 more years. Option D is correct because the retention policy retains items labeled as 'Highly Confidential' for 7 years from creation. Since the document was created 5 years ago, it will be retained until 7 years from creation (2 more years). Option A is wrong because the retention action is 'Retain', not delete. Option B is wrong because the label meets the condition. Option C is wrong because the retention is based on creation date, not the policy's start.

Answer

The document will be retained for 7 years from the policy creation date

Answer

The document will be deleted immediately

Answer

The document will be retained for 7 years from now

Question 9

A healthcare organization must comply with HIPAA regulations. They need to classify and protect medical records stored in Microsoft 365. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Information Protection. Option B is correct because Microsoft Purview Information Protection includes sensitivity labels and data classification for regulatory compliance. Option A is wrong because Data Lifecycle Management focuses on retention, not classification. Option C is wrong because Audit is for logging. Option D is wrong because Priva is for privacy management.

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Priva

Answer

Microsoft Purview Data Lifecycle Management

Question 10

Your organization uses Microsoft Purview eDiscovery to manage a legal case. You need to place a hold on emails for specific users, but you want to allow the system to apply the hold automatically. Which eDiscovery solution should you use?

Accepted Answer

Microsoft Purview eDiscovery (Premium). Option A is correct because eDiscovery (Premium) provides automatic hold capabilities. Option B is wrong because eDiscovery (Standard) requires manual hold. Option C is wrong because Audit does not provide holds. Option D is wrong because Communication Compliance is for regulatory communications.

Answer

Microsoft Purview eDiscovery (Standard)

Answer

Microsoft Purview Audit (Premium)

Answer

Microsoft Purview Communication Compliance

Question 11

Refer to the exhibit. An administrator runs this KQL query in Microsoft Purview Audit. What is the purpose of this query?

Accepted Answer

To identify file types that a specific user uploaded more than 10 times in the last 30 days. Option B is correct because the query filters for file uploads by a specific user in the last 30 days, groups by file type, and counts files with more than 10 uploads per type. Option A is wrong because it's for a single user, not all users. Option C is wrong because it's for uploads, not deletions. Option D is wrong because there is no file size filter.

Answer

To find the total number of file uploads by all users in the last 30 days

Answer

To find files larger than a certain size uploaded by a specific user

Answer

To list all files deleted by a specific user in the last 30 days

Question 12

A company wants to automatically detect and remediate compliance issues such as sharing sensitive data externally. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Data Loss Prevention. Option D is correct because Microsoft Purview Data Loss Prevention prevents unauthorized sharing of sensitive data. Option A is wrong because eDiscovery is for legal discovery. Option B is wrong because Audit is for logging. Option C is wrong because Records Management is for managing records.

Answer

Microsoft Purview Records Management

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Audit

Question 13

Your organization uses Microsoft Purview to manage compliance. You need to create a policy that ensures data is retained for a specific period and then automatically deleted. Which solution should you use?

Accepted Answer

Microsoft Purview Data Lifecycle Management. Option A is correct because Data Lifecycle Management provides retention and deletion policies. Option B is wrong because Information Protection focuses on classification. Option C is wrong because Audit is for logging. Option D is wrong because Compliance Manager is for risk assessment.

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Information Protection

Question 14

Which TWO of the following are capabilities of Microsoft Purview Communication Compliance? (Select TWO.)

Accepted Answer

Enforce company policies on communication channels. Options A and D are correct because Communication Compliance can detect inappropriate content and enforce communication policies. Option B is wrong because auto-labeling is part of Information Protection. Option C is wrong because eDiscovery handles legal holds. Option E is wrong because DLP prevents data loss.

Answer

Automatically apply sensitivity labels to documents

Answer

Prevent sharing of credit card numbers via email

Answer

Place legal holds on user mailboxes

Question 15

Which THREE of the following are features of Microsoft Purview Compliance Manager? (Select THREE.)

Accepted Answer

Compliance score and templates for custom assessments. Options A, B, and E are correct because Compliance Manager includes actions, assessments, and templates. Option C is wrong because trainable classifiers are for auto-labeling. Option D is wrong because records management is a separate feature.

Answer

Record declaration and disposition reviews

Answer

Trainable classifiers to identify sensitive content