SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 14 — 15 Questions

Question 1

Your organization uses Microsoft 365 and wants to classify and protect documents based on their content, such as credit card numbers. Which Microsoft Purview feature automatically classifies content based on sensitive information types?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Auto-labeling with sensitivity labels. Auto-labeling with sensitivity labels in Microsoft Purview can automatically classify and protect documents by detecting sensitive information types (e.g., credit card numbers) using built-in or custom data classifiers. This feature applies the appropriate sensitivity label based on content matches, enabling consistent protection across Microsoft 365 services.

Answer

Data Loss Prevention policy

Answer

Unified labeling client

Answer

eDiscovery

Question 2

Your company uses Microsoft Purview Data Lifecycle Management. You need to ensure that emails in users' mailboxes are retained for 7 years for compliance, but users should be able to delete emails they no longer need before that period. Which configuration achieves this?

Accepted Answer

Apply a retention policy without a preservation lock. A retention policy without a preservation lock (Option D) allows you to define a retention period (7 years) for emails while still permitting users to delete items before that period ends. When a user deletes an email, it is moved to the Recoverable Items folder and retained for the remainder of the 7-year period, after which it is permanently deleted. This meets the compliance requirement without preventing user deletion.

Answer

Configure a Data Loss Prevention policy

Answer

Place a litigation hold on the mailboxes

Answer

Apply a retention label with record locking

Question 3

Your organization uses Microsoft Purview Insider Risk Management. You need to create a policy that detects users exfiltrating sensitive data via email to external recipients. Which policy type should you configure?

Accepted Answer

Data leaks. Data leaks policy type in Microsoft Purview Insider Risk Management is specifically designed to detect and alert on the unauthorized transmission of sensitive data to external recipients, including via email. This policy type analyzes email headers, attachments, and body content against defined sensitive information types (e.g., credit card numbers, PII) and triggers when data is sent outside the organization, matching the scenario described.

Answer

Offensive language

Answer

Data theft

Answer

Security policy violations

Question 4

Your organization uses Microsoft Purview Communication Compliance to detect potential policy violations in Microsoft Teams chats. Which action can the policy automatically take when a violation is detected?

Accepted Answer

Notify the user and their manager via email. Microsoft Purview Communication Compliance is designed to detect and remediate policy violations, but it does not enforce access controls or modify message content directly. Instead, it can automatically notify the user and their manager via email as a configurable remediation action, allowing for human review and follow-up without disrupting communication flow.

Answer

Revoke the user's access to Microsoft Teams

Answer

Block the user from sending messages

Answer

Automatically delete the violating message

Question 5

Your organization uses Microsoft Purview eDiscovery (Premium) to manage a legal case. You need to place a hold on custodians' mailboxes and SharePoint sites to preserve relevant data. Which step must you first take in the eDiscovery workflow?

Accepted Answer

Create a case. In Microsoft Purview eDiscovery (Premium), the workflow begins with creating a case, which serves as the container for all subsequent actions, including holds, searches, and review sets. Without a case, you cannot place holds on custodians' mailboxes or SharePoint sites because the hold is scoped to the case. Therefore, creating a case is the mandatory first step before any preservation or search activities.

Answer

Export results

Answer

Create a review set

Answer

Search for content

Question 6

Your organization uses Microsoft Purview Audit (Standard) and needs to investigate a data breach that occurred 120 days ago. You discover that the required audit logs are not available. What is the most likely reason?

Accepted Answer

Audit log retention is limited to 90 days for Audit (Standard). Microsoft Purview Audit (Standard) retains audit logs for only 90 days by default. Since the data breach occurred 120 days ago, the logs would have been automatically purged after the retention period expired, making them unavailable for investigation.

Answer

The user does not have an appropriate license

Answer

The organization has insufficient storage

Answer

The audit logs were manually deleted by an administrator

Question 7

Which THREE capabilities are part of Microsoft Purview Data Lifecycle Management?

Accepted Answer

Retention labels. Data Lifecycle Management in Microsoft Purview focuses on managing data through its lifecycle, including retention, deletion, and records management. The key capabilities are retention policies (C), retention labels (A), and records management (E). Data Loss Prevention (B) is a separate capability for preventing data leaks, not lifecycle management. eDiscovery (D) is about discovering and exporting data for legal purposes, not lifecycle management. Therefore, the correct options are A, C, and E.

Answer

Data Loss Prevention policies

Answer

eDiscovery

Question 8

Which TWO of the following are Microsoft Purview solutions that help protect sensitive data?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) is a Microsoft Purview solution that helps protect sensitive data by identifying, monitoring, and automatically enforcing policies to prevent accidental or unauthorized sharing of sensitive information such as credit card numbers, social security numbers, or health records across services like Exchange, SharePoint, OneDrive, and Teams. Sensitivity labels are another Purview solution that protect sensitive data by allowing administrators to classify and apply protection (encryption, visual markings) to documents and emails, and enforce controls like 'Do Not Forward' or 'Encrypt-Only' based on the label's configuration.

Answer

Communication Compliance

Answer

eDiscovery

Answer

Insider Risk Management

Question 9

Refer to the exhibit. You are reviewing a sensitivity label configuration in Microsoft Purview. Based on the exhibit, what is the result when a user applies this label to a document?

Accepted Answer

The document is encrypted and a header/footer is added. The exhibit shows a sensitivity label configured with both encryption (via Azure Information Protection) and content marking (header/footer). When a user applies this label, the document is automatically encrypted to protect sensitive data, and the specified header and footer are added to the document as visual markings. This is a common configuration in Microsoft Purview Information Protection to enforce protection and awareness simultaneously.

Answer

The label is automatically removed after one year

Answer

The document is automatically deleted after 30 days

Answer

The document can be printed but not edited

Question 10

Refer to the exhibit. You are evaluating a Microsoft Purview retention policy. The policy is applied to Exchange Online, SharePoint Online, and OneDrive for Business. What is the behavior of this policy?

Accepted Answer

Items are automatically deleted 365 days after creation. The retention policy shown in the exhibit specifies 'Delete items automatically after 365 days from creation date.' This means that once an item reaches 365 days from its creation date (not last modification), it will be permanently deleted from Exchange Online, SharePoint Online, and OneDrive for Business. The policy does not include a retention period to preserve items; it only deletes them after the specified age.

Answer

Items are retained indefinitely and cannot be deleted

Answer

Items are deleted 365 days after last modification

Answer

Items are preserved with a lock and cannot be deleted by users

Question 11

Refer to the exhibit. An administrator runs the PowerShell command shown. What is the purpose of this command?

Accepted Answer

Search audit logs for file activities performed by a specific user. The command searches the unified audit log for file-related operations by a specific user in the last 90 days. Option C is correct. It does not delete files, modify permissions, or block the user.

Answer

Delete all files modified by a user in the last 90 days

Answer

Modify permissions on files uploaded by a user

Answer

Block a user from uploading files

Question 12

Your company is implementing data loss prevention (DLP) policies in Microsoft Purview. You need to create a policy that prevents users from sharing credit card numbers via email to external recipients. The policy should only apply to users in the Finance department. Which action should you take?

Accepted Answer

Create a DLP policy, select the Finance user location, and add the credit card number condition. To apply a DLP policy to specific users, you select their group (e.g., Finance) as a location when creating the policy. This ensures only Finance users are affected. Option A is wrong because auto-labeling with retention labels does not enforce DLP rules. Option B is wrong because sensitivity labels classify data but do not block sharing. Option C is wrong because copying a default template may not allow precise scoping to Finance users; creating a new policy from scratch with location selection is more accurate.

Answer

Create a retention label and apply auto-labeling for Finance

Answer

Create a sensitivity label and publish it to Finance users

Answer

Copy the default DLP template for financial data and modify it

Question 13

A healthcare organization needs to automatically classify documents containing patient health information (PHI) in Microsoft SharePoint. The solution should apply a 'Confidential - Healthcare' sensitivity label to any document that matches the HIPAA content pattern. Which Microsoft Purview feature should be used?

Accepted Answer

Auto-labeling for sensitivity labels. Auto-labeling for sensitivity labels (Option D) is correct because it automatically applies the specified sensitivity label to documents that match a defined pattern (e.g., HIPAA content) in SharePoint. Option A is wrong because retention label auto-apply is for retention, not sensitivity. Option B is wrong because manual labeling requires user action and does not auto-classify. Option C is wrong because DLP policies enforce rules to prevent data loss, they do not apply sensitivity labels.

Answer

Retention label auto-apply

Answer

Manual sensitivity labeling

Answer

Data loss prevention (DLP) policy

Question 14

Your organization uses Microsoft Purview for data governance. You need to ensure that when a user marks an email as 'Confidential' using a sensitivity label, the email is automatically encrypted and cannot be forwarded. What configuration is required?

Accepted Answer

Configure the sensitivity label with encryption and a rights management template that prohibits forwarding. Microsoft Purview sensitivity labels can be configured with encryption settings that use Azure Rights Management (Azure RMS) to enforce usage restrictions. By selecting the 'Do Not Forward' template, the email is automatically encrypted and the recipient cannot forward, copy, or print the message, meeting the requirement.

Answer

Create a DLP policy that detects the 'Confidential' label and applies encryption

Answer

Use the Azure Information Protection unified labeling scanner

Answer

Apply a retention label that triggers encryption

Question 15

Your company is subject to GDPR and must be able to respond to data subject requests (DSRs) by finding all personal data of a specific user across Microsoft 365. Which Microsoft Purview solution should you use?

Accepted Answer

eDiscovery (Standard or Premium). eDiscovery (Standard or Premium) is the correct solution because it is specifically designed to search for and export content across Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams) to fulfill data subject requests (DSRs) under GDPR. It allows you to create a case, define a search query for a specific user's personal data, and export the results for review and action, directly supporting the right to access and erasure.

Answer

Communication Compliance

Answer

Privileged Access Management

Answer

Audit (Standard or Premium)