SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 16 — 15 Questions

Question 1

A company uses Microsoft Purview Information Protection to classify and protect sensitive data. They want to automatically apply a sensitivity label to documents containing credit card numbers. Which should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure an auto-labeling policy with a sensitive info type for credit card numbers. Microsoft Purview auto-labeling policies can automatically apply sensitivity labels to documents and emails that contain specific sensitive information types, such as credit card numbers. This enables automated classification and protection without requiring user intervention, directly meeting the requirement to automatically apply a label based on the presence of credit card data.

Answer

Use a manual labeling policy requiring users to apply labels

Answer

Create a trainable classifier for credit card patterns

Answer

Set up a data classification activity explorer to monitor credit card usage

Question 2

A healthcare organization must comply with HIPAA regulations. They need to classify and protect medical records stored in Microsoft 365. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (D) is the correct solution because it enables organizations to classify, label, and protect sensitive data—such as medical records—using sensitivity labels and encryption. This directly supports HIPAA compliance by ensuring that protected health information (PHI) is consistently safeguarded across Microsoft 365 services, including Exchange, SharePoint, and OneDrive.

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Priva

Answer

Microsoft Purview Data Lifecycle Management

Question 3

Your organization uses Microsoft Purview eDiscovery to manage a legal case. You need to place a hold on emails for specific users, but you want to allow the system to apply the hold automatically. Which eDiscovery solution should you use?

Accepted Answer

Microsoft Purview eDiscovery (Premium). Microsoft Purview eDiscovery (Premium) is the correct choice because it provides advanced legal hold capabilities, including the ability to apply holds automatically based on specified criteria such as user mailboxes or SharePoint sites. Unlike the Standard version, Premium supports policy-based holds that can be set to trigger automatically without manual intervention, which is essential for managing legal cases efficiently.

Answer

Microsoft Purview eDiscovery (Standard)

Answer

Microsoft Purview Audit (Premium)

Answer

Microsoft Purview Communication Compliance

Question 4

Refer to the exhibit. An administrator runs this KQL query in Microsoft Purview Audit. What is the purpose of this query?

Accepted Answer

To identify file types that a specific user uploaded more than 10 times in the last 30 days. The KQL query uses `| summarize Count = count() by FileType` to group audit log entries by file type, then `| where Count > 10` filters for file types that appear more than 10 times. The `where UserId == 'user@domain.com'` restricts the results to a specific user, and `| where TimeGenerated > ago(30d)` limits the time range to the last 30 days. This directly identifies file types uploaded more than 10 times by that user, matching option D.

Answer

To find the total number of file uploads by all users in the last 30 days

Answer

To find files larger than a certain size uploaded by a specific user

Answer

To list all files deleted by a specific user in the last 30 days

Question 5

A company wants to automatically detect and remediate compliance issues such as sharing sensitive data externally. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Data Loss Prevention. Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect, alert, and automatically remediate when sensitive data (e.g., credit card numbers, personally identifiable information) is shared externally via email, Teams, or cloud apps. DLP policies can enforce actions like blocking the transmission or applying encryption, directly addressing the requirement to prevent unauthorized external sharing of sensitive data.

Answer

Microsoft Purview Records Management

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Audit

Question 6

Your organization uses Microsoft Purview to manage compliance. You need to create a policy that ensures data is retained for a specific period and then automatically deleted. Which solution should you use?

Accepted Answer

Microsoft Purview Data Lifecycle Management. Microsoft Purview Data Lifecycle Management (D) provides the ability to create retention and deletion policies that automatically retain data for a specified period and then delete it. This solution directly addresses the requirement to manage data retention and deletion schedules within Microsoft Purview.

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Information Protection

Question 7

Which TWO of the following are capabilities of Microsoft Purview Communication Compliance? (Select TWO.)

Accepted Answer

Enforce company policies on communication channels. Option A is correct because Communication Compliance is designed to help organizations enforce their internal policies and codes of conduct across communication channels such as Microsoft Teams, Exchange Online, and Viva Engage by detecting policy violations. Option B is correct because Communication Compliance uses built-in and custom classifiers to detect offensive, harassing, or inappropriate language in emails and Teams messages, including profanity, threats, and targeted harassment. Option C is not correct because automatic sensitivity label application is a capability of Microsoft Purview Information Protection (auto-labeling policies), not Communication Compliance. Option D is not correct because preventing the sharing of credit card numbers via email is handled by Data Loss Prevention (DLP) policies in Microsoft Purview, not Communication Compliance. Option E is not correct because placing legal holds on user mailboxes is a capability of Microsoft Purview eDiscovery (or Exchange litigation hold), not Communication Compliance.

Answer

Automatically apply sensitivity labels to documents

Answer

Prevent sharing of credit card numbers via email

Answer

Place legal holds on user mailboxes

Question 8

Which THREE of the following are features of Microsoft Purview Compliance Manager? (Select THREE.)

Accepted Answer

Compliance score and templates for custom assessments. Option B is correct because Compliance Manager provides a compliance score that quantifies an organization's posture and supports custom assessment templates so you can build assessments for your own controls and standards. Option C is correct because Compliance Manager ships with pre-built assessments mapped to common regulations and standards such as GDPR, ISO 27001, and NIST, letting you evaluate against them out of the box. Option E is correct because Compliance Manager includes Microsoft-managed improvement actions that guide remediation steps for regulations, and Microsoft updates these actions as regulations and Microsoft services change. Option A is not a Compliance Manager feature; record declaration and disposition reviews are handled through records management in Microsoft Purview (e.g., retention labels and disposition review). Option D is not a Compliance Manager feature; trainable classifiers are a Microsoft Purview data classification capability used to identify sensitive content, not to assess regulatory compliance.

Answer

Record declaration and disposition reviews

Answer

Trainable classifiers to identify sensitive content

Question 9

Which TWO of the following are examples of sensitive information types in Microsoft Purview? (Select TWO.)

Accepted Answer

Passport number. In Microsoft Purview, sensitive information types (SITs) are pattern-based classifiers that detect specific data such as personally identifiable information or financial data. Option A (Passport number) is correct because passport numbers are a built-in SIT category used to identify government-issued identity data across many countries. Option E (Credit card number) is correct because credit card numbers are a classic built-in SIT, detected via patterns like the Luhn check plus keyword corroboration (e.g., 'credit card'). Option B (Public holiday list) is not sensitive data and has no SIT pattern. Option C (Employee name) is not a standalone SIT because a name alone lacks a reliable pattern and is typically only used as supporting evidence in other SITs. Option D (Internal project code name) is business-confidential but not a predefined sensitive information type, since SITs target specific data formats rather than arbitrary internal labels.

Answer

Public holiday list

Answer

Employee name

Answer

Internal project code name

Question 10

Which THREE of the following are retention actions in Microsoft Purview Data Lifecycle Management? (Select THREE.)

Accepted Answer

Delete the content after a specified period. In Microsoft Purview Data Lifecycle Management, retention settings define what happens to content when its retention period expires, and the three supported retention actions are: retain only (option E — keep the content for a specified period, with no deletion action), delete only (option A — delete the content after a specified period, applicable when content has no retention requirement), and retain then delete (option D — retain the content for a period and then delete it, the most common action that satisfies both preservation and disposition needs). These three actions map directly to the retention action choices presented when configuring a retention label or retention policy in Purview. Option B is incorrect because automatic archiving is not a retention action in Data Lifecycle Management; archiving is handled through Exchange Online archive mailboxes or third-party/records management features, not as a retention action. Option C is incorrect because applying a sensitivity label is an Information Protection (Microsoft Purview Information Protection) capability used for classification and encryption, not a retention action, even though retention labels can be applied to content.

Answer

Automatically archive the content

Answer

Apply a sensitivity label to the content

Question 11

Which TWO of the following are capabilities of Microsoft Purview Insider Risk Management? (Select TWO.)

Accepted Answer

Identify anomalous user activities such as mass file downloads. Microsoft Purview Insider Risk Management uses predefined risk indicators to detect anomalous user activities, such as mass file downloads, which may signal data theft or policy violations. These indicators are based on user behavior analytics and can be customized to align with organizational risk tolerance.

Answer

Review communications for policy violations

Answer

Conduct eDiscovery searches for legal cases

Answer

Block sharing of sensitive data via email

Question 12

You are a compliance administrator for Contoso, a multinational company that uses Microsoft 365. The company has the following requirements: 
1. Automatically retain all documents containing personally identifiable information (PII) for 7 years. 
2. Prevent users from sharing PII via email with external recipients unless they provide a business justification. 
3. Monitor and alert when users access sensitive data outside of business hours. 
4. Generate a compliance score for GDPR and ISO 27001. 
You need to configure the appropriate Microsoft Purview solutions. For each requirement, match the correct solution. Which combination of solutions should you use?

Accepted Answer

Data Lifecycle Management for retention; DLP for sharing; Insider Risk Management for monitoring; Compliance Manager for scoring. Requirement 1 (retain PII for 7 years) is met by a retention label or policy from Data Lifecycle Management (not Information Protection, which is for classification). Requirement 2 (prevent sharing without justification) is met by a Data Loss Prevention (DLP) policy that can block sharing and require user override with business justification. Requirement 3 (monitor access outside business hours) is met by Insider Risk Management, which can detect anomalous access patterns. Requirement 4 (compliance score) is met by Compliance Manager. Option A is wrong because Information Protection labels are for classification, not retention; also monitoring access outside hours needs Insider Risk Management, not DLP. Option B is wrong because Communication Compliance is for monitoring communications, not for preventing sharing via email; DLP is needed for that. Option D is wrong because eDiscovery is for legal discovery, not for access monitoring.

Answer

Information Protection for retention; DLP for sharing; Data Lifecycle Management for monitoring; Compliance Manager for scoring

Answer

Data Lifecycle Management for retention; Communication Compliance for sharing; Insider Risk Management for monitoring; Compliance Manager for scoring

Answer

Information Protection for retention; eDiscovery for sharing; Insider Risk Management for monitoring; Compliance Manager for scoring

Question 13

Your organization uses Microsoft Purview to manage data classification. You need to ensure that sensitive data containing social security numbers is automatically labeled when stored in SharePoint Online. What should you configure?

Accepted Answer

Create an auto-labeling policy for sensitivity labels. D is correct because auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels to files containing sensitive data, such as social security numbers, when stored in SharePoint Online. This uses pattern-based detection to classify and label content at rest without manual intervention.

Answer

Use the data classification dashboard in Microsoft Purview

Answer

Create a retention label policy

Answer

Configure a data loss prevention (DLP) policy

Question 14

A company wants to ensure that emails containing credit card numbers are blocked from being sent externally. Which Microsoft Purview solution should they use?

Accepted Answer

Data Loss Prevention (DLP) policy. Data Loss Prevention (DLP) policies in Microsoft Purview are specifically designed to detect and protect sensitive data, such as credit card numbers, by scanning email content and attachments. When a DLP policy is configured to block external sharing of this sensitive information, it can automatically prevent the email from being sent, ensuring compliance with data protection regulations.

Answer

Sensitivity labels

Answer

Communication compliance

Answer

Information barriers

Question 15

Your organization has a Microsoft Purview compliance portal. You need to audit who deleted a specific file from SharePoint Online last week. What should you do?

Accepted Answer

Search the unified audit log in Microsoft Purview. The unified audit log in Microsoft Purview records all user and admin activities, including file deletions in SharePoint Online. By searching this log, you can find the specific event that shows who deleted the file, when it happened, and from which location. This is the correct tool for auditing past actions like file deletions.

Answer

Use Content Search in eDiscovery

Answer

Configure a retention policy for SharePoint

Answer

Review the data classification dashboard