SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 17 — 15 Questions

Question 1

A law firm needs to retain client documents for 10 years after case closure, but automatically delete drafts after 30 days. Which two Microsoft Purview solutions should be combined?

Accepted Answer

Microsoft Purview Records Management and Data Lifecycle Management. Option B is correct because Records Management handles retention for records (client documents), and Data Lifecycle Management handles retention for non-record content (drafts). Option A is wrong because eDiscovery is for search, not retention. Option C is wrong because Audit logs events. Option D is wrong because DLP is for protection.

Answer

Microsoft Purview Data Loss Prevention and eDiscovery

Answer

Microsoft Purview eDiscovery and Audit

Answer

Microsoft Purview Audit and Data Loss Prevention

Question 2

A company wants to automatically apply a 'Confidential' sensitivity label to all documents containing credit card numbers. Which Microsoft Purview feature should be used to create the auto-labeling policy?

Accepted Answer

Microsoft Purview Auto-labeling policies. Option D is correct because auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels based on sensitive info types. Option A is wrong because DLP policies protect data, not label. Option B is wrong because Data Lifecycle Management handles retention. Option C is wrong because Communication Compliance monitors communications.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Lifecycle Management

Question 3

An organization uses Microsoft Purview Compliance Manager to track compliance with regulations. The compliance officer needs to create a custom assessment for a new internal policy. What should they do?

Accepted Answer

Create a new custom assessment in Compliance Manager and add custom controls.. Option A is correct because Compliance Manager allows creating custom assessments with custom controls and actions. Option B is wrong because assessment templates are not imported from external sources. Option C is wrong because the built-in templates are for standard regulations, not custom policies. Option D is wrong because the Microsoft 365 admin center does not create compliance assessments.

Answer

Use the Microsoft 365 admin center to create a compliance assessment.

Answer

Use the built-in 'Custom' template in Compliance Manager and modify it.

Answer

Import a new assessment template from the Microsoft Service Trust Portal.

Question 4

A company uses Microsoft Teams and wants to ensure that messages containing offensive language are flagged for review. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Communication Compliance. Option C is correct because Communication Compliance in Microsoft Purview detects offensive language in communications. Option A is wrong because DLP protects data from loss, not language. Option B is wrong because Information Barriers restrict communication between segments. Option D is wrong because Audit logs activities but does not flag content.

Answer

Microsoft Purview Information Barriers

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Audit

Question 5

Which TWO of the following are capabilities of Microsoft Purview Data Loss Prevention?

Accepted Answer

Block sharing of sensitive data via email.. Microsoft Purview Data Loss Prevention (DLP) is designed to detect and prevent the accidental or intentional sharing of sensitive information. Option C is correct because DLP policies can block the sharing of sensitive data via email by inspecting content in transit and applying actions such as blocking the message. Option E is correct because DLP can display policy tips to users in real time, warning them before they share sensitive data and allowing them to override the block with justification.

Answer

Define retention periods for documents.

Answer

Search for content in Exchange Online mailboxes.

Answer

Automatically apply sensitivity labels to content.

Question 6

Which THREE are benefits of using Microsoft Purview Compliance Manager?

Accepted Answer

View a compliance score that indicates your overall compliance posture.. Options A, C, and D are correct. Compliance Manager provides a compliance score (A), suggests improvement actions (C), and allows you to assign tasks to others (D). Option B is wrong because Compliance Manager does not automatically apply labels. Option E is wrong because it does not create DLP policies.

Answer

Create Data Loss Prevention policies.

Answer

Automatically apply sensitivity labels to documents.

Question 7

Which TWO scenarios are appropriate uses of Microsoft Purview Audit (Standard)?

Accepted Answer

Investigating a user who accessed a sensitive file in SharePoint.. Options B and D are correct. Audit (Standard) logs user and admin activities (B) and can be searched in the Purview compliance portal (D). Option A is wrong because detailed custom reports are part of Audit (Premium). Option C is wrong because sensitivity label events may require Audit (Premium) for full details. Option E is wrong because Audit (Standard) has a 90-day retention.

Answer

Generating custom reports with PowerShell for all activities.

Answer

Tracking when sensitivity labels are applied to documents.

Answer

Retaining audit logs for 2 years for compliance purposes.

Question 8

Refer to the exhibit. You are reviewing a Microsoft Purview sensitivity label configuration. A user reports that a document containing a sensitive info type with confidence 80 was not automatically labeled. What is the most likely cause?

Accepted Answer

The auto-labeling policy is not configured to apply this label.. Option D is correct because the exhibit shows 'userOverrideEnabled': false, meaning users cannot override, but the auto-labeling minConfidence is 75, so a confidence of 80 should trigger labeling. However, the issue is that the user may have manually removed the label and auto-labeling does not reapply if userOverrideEnabled is false. Actually, re-reading: auto-labeling should apply if confidence >=75. The exhibit does not show a problem. Wait, the question says 'not automatically labeled'. The exhibit shows auto-labeling configured with minConfidence 75. Option A is wrong because the template ID is present. Option B is wrong because encryption is enabled. Option C is wrong because user override is false. The correct answer is that auto-labeling requires a minimum confidence of 75, and 80 meets that. So the issue might be that the label is not published? However, the best answer is D: The auto-labeling policy may not be configured to apply this label. The exhibit only shows the label definition, not the auto-labeling policy that applies it. So D is correct.

Answer

The user has overridden the label application.

Answer

The encryption is disabled.

Answer

The encryption template ID is missing.

Question 9

Refer to the exhibit. A compliance administrator runs the PowerShell commands to create a DLP policy. Users complain that they are blocked from sending emails containing credit card numbers but cannot override the block. The administrator wants to allow override with a business justification. What should they do?

Accepted Answer

Change the NotifyAllowOverride parameter to $true in the rule.. Option B is correct because the cmdlet sets NotifyAllowOverride $false, which prevents override. Changing it to $true allows override with justification. Option A is wrong because the policy applies to Exchange and SharePoint. Option C is wrong because the policy is already enabled. Option D is wrong because the rule applies to credit card numbers.

Answer

Change the SentInfo parameter to a different sensitive info type.

Answer

Remove the SharePoint location from the policy.

Answer

Enable the DLP policy by setting the Policy's Enabled parameter to $true.

Question 10

Refer to the exhibit. A legal team needs to preserve all documents in SharePoint and OneDrive for 5 years. The current policy retains for 1 year. What should the administrator do to meet the requirement?

Accepted Answer

Change the retention duration to 1825 days.. Option C is correct because the policy retains for 365 days (1 year), but the requirement is 5 years. Changing the retention duration to 1825 days (5 years) meets the requirement. Option A is wrong because the policy already includes both locations. Option B is wrong because changing to Delete would delete content. Option D is wrong because changing to KeepAndDelete would still delete after retention, but the duration is the issue.

Answer

Add Exchange Online to the locations.

Answer

Change the retention type to Delete.

Answer

Change the retention action to KeepAndDelete.

Question 11

Your organization is implementing Microsoft Purview to manage sensitive data. You need to ensure that documents containing credit card numbers are automatically detected and protected. Which Microsoft Purview solution should you configure?

Accepted Answer

Data Loss Prevention (DLP). Option C is correct because Data Loss Prevention (DLP) policies can automatically detect sensitive information like credit card numbers and apply protective actions. Option A is wrong because Information Barriers restrict communication but do not classify content. Option B is wrong because eDiscovery is for legal discovery, not auto-detection. Option D is wrong because Audit logs track activities but do not protect data.

Answer

eDiscovery (Premium)

Answer

Audit (Standard)

Answer

Information Barriers

Question 12

Your organization uses Microsoft Purview to label documents. Users report that some documents are automatically labeled as 'Confidential' even though the content is public. Which action should you take to resolve this issue?

Accepted Answer

Review and adjust the auto-labeling rules in the sensitivity label policies. Option B is correct because automatic labeling uses sensitivity label policies and auto-labeling rules to classify content. If incorrectly labeled, the auto-labeling rules or conditions should be reviewed and adjusted. Option A is wrong because disabling auto-labeling removes the feature but does not fix the rule. Option C is wrong because manual labeling requires user action, which may not be desired. Option D is wrong because auditing shows what happened but does not change labeling behavior.

Answer

Enable auditing to track label usage

Answer

Disable auto-labeling in all sensitivity label policies

Answer

Require users to manually apply labels

Question 13

Refer to the exhibit. You are a compliance administrator managing a DLP policy in Microsoft Purview. The policy is set to 'enforce' mode but you notice that internal users can still share credit card numbers via email to external recipients. What is the most likely cause?

Accepted Answer

The action only blocks access to the content from external users, not sharing by internal users. Option D is correct because the action 'blockAccess' with 'blockLevel' set to 'blockOnlyExternal' only blocks access from external users, but internal users can still share with external recipients. Option A is wrong because the policy is in enforce mode. Option B is wrong because the condition is met (content contains credit card numbers). Option C is wrong because the policy applies to the whole tenant unless scoped.

Answer

The policy is in test mode, not enforce mode

Answer

The policy is not applied to the user's mailbox

Answer

The condition requires a minimum count of 5

Question 14

Your organization needs to retain all email communications with customers for 7 years due to regulatory requirements. Which Microsoft Purview solution should you use?

Accepted Answer

Retention policies. Option A is correct because retention policies in Microsoft Purview allow you to retain data for a specified period. Option B is wrong because DLP is for preventing data loss, not retention. Option C is wrong because sensitivity labels classify data but do not enforce retention. Option D is wrong because eDiscovery is for search and export, not setting retention.

Answer

Sensitivity labels

Answer

eDiscovery (Standard)

Answer

Data Loss Prevention policies

Question 15

A user reports that a sensitive document labeled 'Highly Confidential' was accidentally shared with an external vendor. You need to investigate how the sharing occurred. Which two Microsoft Purview tools should you use together?

Accepted Answer

Audit (Standard) and Content Explorer. Option D is correct because Audit logs track sharing events, and Content Explorer shows where sensitive documents are located. Option A is wrong because DLP would prevent sharing, not investigate. Option B is wrong because eDiscovery is for legal discovery. Option C is wrong because Records Management is for records declaration. Option E is wrong because Insider Risk Management is for risky behavior, not specific document tracking.

Answer

Insider Risk Management and Information Barriers

Answer

eDiscovery (Premium) and Communication Compliance

Answer

Data Loss Prevention and Sensitivity labels

Answer

Records Management and Data Lifecycle Management