SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 16 — 15 Questions

Question 1

You are a compliance administrator for Contoso, a multinational company that uses Microsoft 365. The company has the following requirements: 
1. Automatically retain all documents containing personally identifiable information (PII) for 7 years. 
2. Prevent users from sharing PII via email with external recipients unless they provide a business justification. 
3. Monitor and alert when users access sensitive data outside of business hours. 
4. Generate a compliance score for GDPR and ISO 27001. 
You need to configure the appropriate Microsoft Purview solutions. For each requirement, match the correct solution. Which combination of solutions should you use?

Accepted Answer

Data Lifecycle Management for retention; DLP for sharing; Insider Risk Management for monitoring; Compliance Manager for scoring. Requirement 1 (retain PII for 7 years) is met by a retention label or policy from Data Lifecycle Management (not Information Protection, which is for classification). Requirement 2 (prevent sharing without justification) is met by a Data Loss Prevention (DLP) policy that can block sharing and require user override with business justification. Requirement 3 (monitor access outside business hours) is met by Insider Risk Management, which can detect anomalous access patterns. Requirement 4 (compliance score) is met by Compliance Manager. Option A is wrong because Information Protection labels are for classification, not retention; also monitoring access outside hours needs Insider Risk Management, not DLP. Option B is wrong because Communication Compliance is for monitoring communications, not for preventing sharing via email; DLP is needed for that. Option D is wrong because eDiscovery is for legal discovery, not for access monitoring.

Answer

Information Protection for retention; DLP for sharing; Data Lifecycle Management for monitoring; Compliance Manager for scoring

Answer

Data Lifecycle Management for retention; Communication Compliance for sharing; Insider Risk Management for monitoring; Compliance Manager for scoring

Answer

Information Protection for retention; eDiscovery for sharing; Insider Risk Management for monitoring; Compliance Manager for scoring

Question 2

Your organization uses Microsoft Purview to manage data classification. You need to ensure that sensitive data containing social security numbers is automatically labeled when stored in SharePoint Online. What should you configure?

Accepted Answer

Create an auto-labeling policy for sensitivity labels. D is correct because auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels to files containing sensitive data, such as social security numbers, when stored in SharePoint Online. This uses pattern-based detection to classify and label content at rest without manual intervention.

Answer

Use the data classification dashboard in Microsoft Purview

Answer

Create a retention label policy

Answer

Configure a data loss prevention (DLP) policy

Question 3

A company wants to ensure that emails containing credit card numbers are blocked from being sent externally. Which Microsoft Purview solution should they use?

Accepted Answer

Data Loss Prevention (DLP) policy. Data Loss Prevention (DLP) policies in Microsoft Purview are specifically designed to detect and protect sensitive data, such as credit card numbers, by scanning email content and attachments. When a DLP policy is configured to block external sharing of this sensitive information, it can automatically prevent the email from being sent, ensuring compliance with data protection regulations.

Answer

Sensitivity labels

Answer

Communication compliance

Answer

Information barriers

Question 4

Your organization has a Microsoft Purview compliance portal. You need to audit who deleted a specific file from SharePoint Online last week. What should you do?

Accepted Answer

Search the unified audit log in Microsoft Purview. The unified audit log in Microsoft Purview records all user and admin activities, including file deletions in SharePoint Online. By searching this log, you can find the specific event that shows who deleted the file, when it happened, and from which location. This is the correct tool for auditing past actions like file deletions.

Answer

Use Content Search in eDiscovery

Answer

Configure a retention policy for SharePoint

Answer

Review the data classification dashboard

Question 5

An organization has a Microsoft Purview Data Lifecycle Management policy that retains all documents for 5 years. However, legal requires that documents related to a specific lawsuit be preserved indefinitely. What should you do?

Accepted Answer

Place the relevant sites on litigation hold. Litigation hold (now called legal hold in Microsoft Purview) preserves all content in a SharePoint site or OneDrive account indefinitely, overriding any retention policy. This ensures documents related to the lawsuit are not deleted or altered, even if a Data Lifecycle Management policy would otherwise remove them after 5 years. The hold applies at the site level, not to individual items, and prevents both deletion and modification.

Answer

Configure information barriers

Answer

Apply a retention label with indefinite retention

Answer

Create a DLP policy to block deletion

Question 6

Your company needs to detect and prevent employees from sharing confidential product plans via email with external parties. Which Microsoft Purview solution should you configure?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect and prevent the unauthorized sharing of sensitive information, such as confidential product plans, via email and other channels. DLP policies can inspect email content and attachments for sensitive data types (e.g., custom keywords or patterns) and automatically block or quarantine the message if it is sent to external recipients. This aligns directly with the requirement to prevent employees from sharing confidential plans externally.

Answer

Sensitivity labels

Answer

Communication compliance

Answer

Retention policies

Question 7

A financial services company uses Microsoft Purview to manage compliance. They need to automatically apply a 'Confidential' label to all documents containing financial data in SharePoint. What should they configure?

Accepted Answer

Auto-labeling policy for sensitivity labels. Auto-labeling policies for sensitivity labels in Microsoft Purview allow organizations to automatically apply labels to documents based on conditions such as sensitive information types (e.g., financial data patterns). This meets the requirement to label documents containing financial data in SharePoint without manual intervention, leveraging built-in or custom sensitive info types.

Answer

Data classification dashboard

Answer

Trainable classifiers for manual labeling

Answer

Data Loss Prevention (DLP) policy

Question 8

Which TWO Microsoft Purview solutions can be used to protect sensitive data in Microsoft Teams?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) policies in Microsoft Purview can scan Microsoft Teams messages and files for sensitive data types (e.g., credit card numbers, social security numbers) and automatically block or warn users when such data is shared. Sensitivity labels can be applied to Teams files and messages to enforce encryption, access restrictions, or visual markings, thereby protecting sensitive data at rest and in transit.

Answer

Information barriers

Answer

Communication compliance

Answer

eDiscovery

Question 9

Which THREE capabilities are included in Microsoft Purview Audit (Premium)?

Accepted Answer

Access to high-value critical events. Microsoft Purview Audit (Premium) provides access to high-value critical events, such as when mailbox items are accessed or when administrative actions are performed on sensitive data. These events are not logged in Audit (Standard) and require Premium licensing to capture, enabling deeper forensic investigation.

Answer

Trainable classifiers

Answer

Custom alert policies

Question 10

Which TWO Microsoft Purview solutions help organizations respond to data subject requests under GDPR?

Accepted Answer

eDiscovery. eDiscovery (A) is correct because it enables organizations to search for and export personal data across Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams) to fulfill data subject access and export requests under GDPR Article 15. Data Lifecycle Management (C) is correct because it allows organizations to retain personal data for the minimum necessary period and permanently delete it when no longer needed, supporting the right to erasure under GDPR Article 17.

Answer

Information barriers

Answer

Data Loss Prevention (DLP)

Answer

Communication compliance

Question 11

Refer to the exhibit. You are reviewing a Microsoft Purview classification rule. The rule is enabled and set to apply a sensitivity label. However, you notice that documents containing EU personal data are not being labeled automatically. What is the most likely cause?

Accepted Answer

The rule does not include a condition to detect sensitive data. The rule is enabled and applies a sensitivity label, but documents containing EU personal data are not being labeled automatically. For automatic labeling to occur, the classification rule must include a condition that detects sensitive data types (e.g., EU passport numbers or GDPR-defined personal data). Without such a condition, the rule has no trigger to identify the content and apply the label, even if the rule is active and scoped correctly.

Answer

The label ID is invalid

Answer

The rule status is Disabled

Answer

The rule is not scoped to SharePoint Online

Question 12

Refer to the exhibit. You run the PowerShell command to search the unified audit log for file deletions. The command returns no results, but you know a file was deleted last week. What is the most likely reason?

Accepted Answer

Audit logging is not enabled for the organization. The most likely reason is that audit logging is not enabled for the organization. In Microsoft 365, unified audit log search requires that audit logging be explicitly turned on (by default, it is enabled for most tenants, but it can be disabled). If audit logging is disabled, no audit records are generated, so any search—including for 'FileDeleted' operations—will return no results, even if files were actually deleted.

Answer

The operation name 'FileDeleted' is incorrect

Answer

Audit logs are only retained for 90 days

Answer

The StartDate and EndDate are incorrect

Question 13

You are the compliance administrator for Contoso, a multinational corporation with headquarters in the US and subsidiaries in Europe and Asia. Contoso uses Microsoft 365 E5 and Microsoft Purview. The company handles personal data subject to GDPR and CCPA. You need to design a compliance solution that meets the following requirements:
- Automatically classify and protect documents containing personal data in SharePoint Online and OneDrive for Business.
- Ensure that data subject requests (DSRs) for access and deletion can be fulfilled within the regulatory timeframes.
- Prevent accidental sharing of sensitive data via email and Teams.
- Maintain an audit trail of all activities related to personal data for at least one year.
- Manage data retention to comply with local laws that require different retention periods for different types of data.
Which combination of Microsoft Purview solutions should you use?

Accepted Answer

Sensitivity labels with auto-labeling, DLP, eDiscovery, Data Lifecycle Management, and Audit (Premium). It includes all the necessary Purview solutions: Sensitivity labels with auto-labeling classify and protect documents containing personal data; DLP prevents accidental sharing via email and Teams; eDiscovery enables fulfilling data subject requests (DSRs) for access and deletion; Data Lifecycle Management allows configuring different retention periods for different data types; Audit (Premium) provides one-year audit trail retention. Options B, C, and D each miss one or more critical components needed to meet all requirements.

Answer

Insider Risk Management, DLP, eDiscovery, and Data Lifecycle Management

Answer

Data Lifecycle Management, Information Barriers, DLP, and Audit (Premium)

Answer

Sensitivity labels, Communication Compliance, eDiscovery, and Audit (Standard)

Question 14

You work for a law firm that uses Microsoft 365 E5. The firm handles highly confidential client information and must comply with attorney-client privilege. You need to implement a compliance solution that:
- Prevents unauthorized sharing of privileged documents via email.
- Enables lawyers to easily classify documents as 'Privileged' and automatically encrypt them.
- Allows the compliance team to monitor for accidental exposure of privileged information in Teams chats.
- Ensures that privileged documents are retained for 7 years after case closure, then automatically deleted.
- Provides the ability to search for privileged documents in case of a legal hold.
What should you configure?

Accepted Answer

Sensitivity labels with encryption, DLP, Communication Compliance, Data Lifecycle Management, and eDiscovery. It combines all required capabilities: Sensitivity labels with encryption allow lawyers to classify documents as 'Privileged' and automatically encrypt them; DLP prevents unauthorized sharing of privileged documents via email; Communication Compliance monitors Teams chats for accidental exposure; Data Lifecycle Management retains privileged documents for 7 years after case closure and then automatically deletes them; eDiscovery provides the ability to search for privileged documents in case of a legal hold. Option B is incorrect because it lacks Sensitivity labels (needed for classification and encryption) and includes Audit (Standard) which does not provide the retention or search capabilities of Data Lifecycle Management and eDiscovery. Option C is incorrect because Insider Risk Management focuses on detecting risky user activities but does not enable lawyers to classify or encrypt documents, and it is not designed for monitoring Teams chats for privilege exposure; Communication Compliance is needed for that. Option D is incorrect because Information Barriers restrict communication between specific groups to prevent information sharing, but does not monitor for accidental exposure in Teams; Communication Compliance is required for that monitoring.

Answer

DLP, Communication Compliance, Data Lifecycle Management, and Audit (Standard)

Answer

Insider Risk Management, DLP, Data Lifecycle Management, and eDiscovery

Answer

Sensitivity labels, Information Barriers, Data Lifecycle Management, and eDiscovery

Question 15

You are the compliance administrator for a retail company that uses Microsoft 365 Business Premium. The company needs to:
- Block customers' credit card numbers from being sent via email.
- Retain all sales invoices for 3 years as per financial regulations.
- Allow managers to search and export employee emails for HR investigations.
- Ensure that only HR can access employee salary information.
Which Microsoft Purview solutions should you use?

Accepted Answer

DLP, Data Lifecycle Management, eDiscovery, and sensitivity labels. DLP (Data Loss Prevention) blocks credit card numbers from being sent via email, Data Lifecycle Management retains sales invoices for 3 years, eDiscovery allows managers to search and export employee emails for HR investigations, and sensitivity labels restrict access to salary information to HR only. Each requirement maps directly to a specific Purview solution: DLP for sensitive data protection, retention policies for compliance, eDiscovery for legal/HR investigations, and sensitivity labels for access control.

Answer

DLP, Information Barriers, eDiscovery, and sensitivity labels

Answer

Insider Risk Management, Data Lifecycle Management, eDiscovery, and sensitivity labels

Answer

Communication Compliance, Data Lifecycle Management, eDiscovery, and sensitivity labels