SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 18 — 15 Questions

Question 1

A healthcare organization stores patient records in SharePoint Online. The compliance officer needs to ensure that records containing Protected Health Information (PHI) are retained for 7 years per regulatory requirements. Which Microsoft Purview solution should they implement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft Purview Records Management. Microsoft Purview Records Management is the correct solution because it enables organizations to apply retention labels and policies that enforce mandatory retention periods for regulatory compliance. For patient records containing PHI, a retention label can be configured to retain the data for exactly 7 years and then trigger a disposition review or automatic deletion, ensuring the organization meets healthcare regulatory requirements.

Answer

Microsoft Purview Audit

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Purview Data Lifecycle Management

Question 2

A company uses Microsoft 365 and wants to automatically classify documents based on sensitive information types like Social Security numbers. Which Microsoft Purview feature should be used?

Accepted Answer

Microsoft Purview Data Classification. Microsoft Purview Data Classification is the correct feature because it automatically scans and classifies documents based on sensitive information types (e.g., Social Security numbers) using built-in or custom classifiers. This enables organizations to identify and label content without manual intervention, directly addressing the requirement for automatic classification.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Sensitivity Labels

Question 3

An organization needs to prevent users from sharing files containing trade secrets with external parties via email. The solution must allow internal sharing. Which Microsoft Purview capability should be configured?

Accepted Answer

Microsoft Purview Data Loss Prevention policies. Microsoft Purview Data Loss Prevention (DLP) policies are designed to detect and block the sharing of sensitive information—such as trade secrets—via email or other channels, while still allowing internal sharing. DLP can inspect email content and attachments for sensitive data types and apply actions like blocking external sends, making it the correct choice for this requirement.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Sensitivity Labels with encryption

Question 4

A financial services firm uses Microsoft Purview Information Barriers to prevent traders from communicating with investment bankers. A new employee in the trading department cannot access a SharePoint site used for compliance training. What should the administrator do?

Accepted Answer

Add the employee to the 'Traders' segment in Microsoft Purview Information Barriers.. Microsoft Purview Information Barriers use segments to group users based on their organizational roles. Adding the new employee to the 'Traders' segment ensures that the Information Barrier policy applies to them correctly, allowing them to access the compliance training SharePoint site while still being blocked from communicating with investment bankers.

Answer

Add the employee to the 'Traders' Microsoft 365 group.

Answer

Use the 'Override' option in the Information Barrier policy.

Answer

Disable the Information Barrier policy for the trading department.

Question 5

A law firm needs to retain client documents for 10 years after case closure, but automatically delete drafts after 30 days. Which two Microsoft Purview solutions should be combined?

Accepted Answer

Microsoft Purview Records Management and Data Lifecycle Management. Microsoft Purview Records Management enables the firm to mark client documents as records and enforce a 10-year retention period after case closure, while Data Lifecycle Management allows automatic deletion of drafts after 30 days. Together, they provide both long-term retention for compliance and short-term cleanup for non-record content, aligning with the firm's specific requirements.

Answer

Microsoft Purview Data Loss Prevention and eDiscovery

Answer

Microsoft Purview eDiscovery and Audit

Answer

Microsoft Purview Audit and Data Loss Prevention

Question 6

A company wants to automatically apply a 'Confidential' sensitivity label to all documents containing credit card numbers. Which Microsoft Purview feature should be used to create the auto-labeling policy?

Accepted Answer

Microsoft Purview Auto-labeling policies. Microsoft Purview Auto-labeling policies are specifically designed to automatically apply sensitivity labels to documents and emails based on conditions such as the presence of sensitive information types (e.g., credit card numbers). This feature uses exact data match or pattern-based detection to label content at rest or in transit, fulfilling the requirement without manual intervention.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Lifecycle Management

Question 7

An organization uses Microsoft Purview Compliance Manager to track compliance with regulations. The compliance officer needs to create a custom assessment for a new internal policy. What should they do?

Accepted Answer

Create a new custom assessment in Compliance Manager and add custom controls.. In Microsoft Purview Compliance Manager, assessments are built on templates that contain controls. To create a custom assessment for a new internal policy, the compliance officer must create a new custom assessment and then add custom controls, because Compliance Manager does not provide a built-in template for arbitrary internal policies. Option B correctly describes this workflow: creating a new custom assessment and adding custom controls.

Answer

Use the Microsoft 365 admin center to create a compliance assessment.

Answer

Use the built-in 'Custom' template in Compliance Manager and modify it.

Answer

Import a new assessment template from the Microsoft Service Trust Portal.

Question 8

A company uses Microsoft Teams and wants to ensure that messages containing offensive language are flagged for review. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Communication Compliance. Microsoft Purview Communication Compliance is designed to detect and flag messages containing offensive language, harassment, or other policy violations in Microsoft Teams, Exchange Online, and Yammer. It uses customizable policies and machine learning classifiers to automatically review communications and route flagged items for human review, making it the correct solution for this requirement.

Answer

Microsoft Purview Information Barriers

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Audit

Question 9

Which TWO of the following are capabilities of Microsoft Purview Data Loss Prevention?

Accepted Answer

Block sharing of sensitive data via email.. Microsoft Purview Data Loss Prevention (DLP) is designed to detect and prevent the accidental or intentional sharing of sensitive information. Option C is correct because DLP policies can block the sharing of sensitive data via email by inspecting content in transit and applying actions such as blocking the message. Option E is correct because DLP can display policy tips to users in real time, warning them before they share sensitive data and allowing them to override the block with justification.

Answer

Define retention periods for documents.

Answer

Search for content in Exchange Online mailboxes.

Answer

Automatically apply sensitivity labels to content.

Question 10

Which THREE are benefits of using Microsoft Purview Compliance Manager?

Accepted Answer

View a compliance score that indicates your overall compliance posture.. Option B is correct because Microsoft Purview Compliance Manager provides a compliance score that quantifies your organization's overall compliance posture against regulatory standards and Microsoft 365 baseline controls, updating as you complete improvement actions. Option C is correct because Compliance Manager lets you assign improvement actions and compliance tasks to other users in the organization, tracking who is responsible and the status of each task. Option D is correct because Compliance Manager surfaces recommended improvement actions, prioritized by impact on your compliance score, that guide you toward meeting specific regulations and standards. Option A is not correct because Data Loss Prevention policies are created and managed in the Microsoft Purview Data Loss Prevention solution, not as a benefit of Compliance Manager. Option E is not correct because automatic sensitivity label application is performed by Microsoft Purview Information Protection features such as auto-labeling policies, not by Compliance Manager.

Answer

Create Data Loss Prevention policies.

Answer

Automatically apply sensitivity labels to documents.

Question 11

Which TWO scenarios are appropriate uses of Microsoft Purview Audit (Standard)?

Accepted Answer

Investigating a user who accessed a sensitive file in SharePoint.. Microsoft Purview Audit (Standard) logs key events such as file access and admin activities, and retains logs for 90 days. Option A is correct because accessing a sensitive file in SharePoint generates an audit event captured by Audit (Standard). Option B is correct because searching the audit log for admin activities within the 90-day retention period is a core capability of Audit (Standard).

Answer

Generating custom reports with PowerShell for all activities.

Answer

Tracking when sensitivity labels are applied to documents.

Answer

Retaining audit logs for 2 years for compliance purposes.

Question 12

Refer to the exhibit. You are reviewing a Microsoft Purview sensitivity label configuration. A user reports that a document containing a sensitive info type with confidence 80 was not automatically labeled. What is the most likely cause?

Accepted Answer

The auto-labeling policy is not configured to apply this label.. Auto-labeling in Microsoft Purview requires a specific auto-labeling policy to be configured and published to the user or location. Even if a sensitivity label exists and a sensitive info type (SIT) is detected with high confidence, the label will not be applied automatically unless an auto-labeling policy is explicitly set to apply that label to documents matching the SIT. The user's report indicates the label was not applied, which points to the policy not being configured, not a user override or encryption issue.

Answer

The user has overridden the label application.

Answer

The encryption is disabled.

Answer

The encryption template ID is missing.

Question 13

Refer to the exhibit. A legal team needs to preserve all documents in SharePoint and OneDrive for 5 years. The current policy retains for 1 year. What should the administrator do to meet the requirement?

Accepted Answer

Change the retention duration to 1825 days.. The retention duration is expressed in days, and 5 years equals 1,825 days (5 × 365). Changing the retention duration to 1825 days directly satisfies the legal team's requirement to preserve documents for 5 years. The retention type and action control whether items are kept or deleted, but the duration is the parameter that defines how long they are retained.

Answer

Add Exchange Online to the locations.

Answer

Change the retention type to Delete.

Answer

Change the retention action to KeepAndDelete.

Question 14

Your organization is implementing Microsoft Purview to manage sensitive data. You need to ensure that documents containing credit card numbers are automatically detected and protected. Which Microsoft Purview solution should you configure?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) is the correct solution because it is specifically designed to automatically detect sensitive data, such as credit card numbers, using built-in sensitive information types (e.g., Credit Card Number) and apply protective actions like blocking sharing or encrypting the document. Microsoft Purview DLP policies can scan content at rest, in transit, and in use across Exchange, SharePoint, OneDrive, Teams, and endpoints, ensuring credit card numbers are identified and protected in real time.

Answer

eDiscovery (Premium)

Answer

Audit (Standard)

Answer

Information Barriers

Question 15

Your organization uses Microsoft Purview to label documents. Users report that some documents are automatically labeled as 'Confidential' even though the content is public. Which action should you take to resolve this issue?

Accepted Answer

Review and adjust the auto-labeling rules in the sensitivity label policies. The issue is that auto-labeling rules are incorrectly classifying public content as 'Confidential'. By reviewing and adjusting the auto-labeling rules in the sensitivity label policies, you can refine the conditions (e.g., sensitive info types or pattern matching) to prevent false positives. This directly addresses the misconfiguration causing automatic labeling of non-sensitive content.

Answer

Enable auditing to track label usage

Answer

Disable auto-labeling in all sensitivity label policies

Answer

Require users to manually apply labels