SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 18 — 15 Questions

Question 1

Your organization is subject to GDPR and must respond to data subject deletion requests within 30 days. You have identified all personal data in Microsoft 365. Which Microsoft Purview solution should you use to permanently delete the data?

Accepted Answer

Data Lifecycle Management (disposition review). Option C is correct because Data Lifecycle Management (disposition review) allows permanent deletion of content after review. Option A is wrong because eDiscovery can export data but not delete. Option B is wrong because DLP prevents data loss, not deletion. Option D is wrong because retention policies keep data, not delete permanently.

Answer

Retention policies to preserve the data

Answer

Data Loss Prevention to block the data

Answer

eDiscovery (Premium) to export the data

Question 2

Your organization uses Microsoft Purview to classify documents containing health information. You need to ensure that only users with explicit permission can access these documents. Which Microsoft Purview capability should you use?

Accepted Answer

Sensitivity labels with encryption. Option B is correct because sensitivity labels can enforce encryption and permissions. Option A is wrong because DLP blocks sharing but does not manage access. Option C is wrong because audit logs track but do not control access. Option D is wrong because retention policies manage time-based retention, not access.

Answer

Audit logs

Answer

Retention policies

Answer

Data Loss Prevention

Question 3

Your organization has a Microsoft Purview Data Lifecycle Management policy that deletes emails after 3 years. A legal hold is placed on a user's mailbox. What happens to the emails?

Accepted Answer

Emails are preserved and not deleted despite the retention policy. Option A is correct because legal hold (litigation hold) preserves all mailbox content regardless of retention policies. Option B is wrong because retention policies do not override legal hold. Option C is wrong because the deletion is suspended. Option D is wrong because the hold applies to the entire mailbox.

Answer

Only emails created before the hold are deleted

Answer

Emails are deleted immediately to avoid conflicting policies

Answer

Emails are deleted after 3 years as per the retention policy

Question 4

Refer to the exhibit. You run the PowerShell command shown to investigate a potential data exfiltration incident. The output is empty. Which is the most likely reason?

Accepted Answer

Audit logging is not enabled for the tenant. Option B is correct because Audit logging must be enabled to capture events. If disabled, the search returns empty. Option A is wrong because the command runs against the unified audit log, not a specific mailbox. Option C is wrong because the command uses correct syntax. Option D is wrong because it would return events if logging is on, regardless of whether the user actually downloaded files.

Answer

The user does not have a mailbox

Answer

The command syntax is incorrect

Answer

The user did not download or access any files in the past 7 days

Question 5

Your organization is implementing Microsoft 365 and needs to prevent sensitive data from being copied to USB drives. Which Microsoft Purview solution should you configure?

Accepted Answer

Endpoint data loss prevention (Endpoint DLP). Option C is correct because Endpoint DLP can monitor and restrict actions on endpoints like copying to USB drives. Option A is wrong because Sensitivity labels classify but do not block actions. Option B is wrong because Audit logs track but do not block. Option D is wrong because Communication Compliance monitors communications, not endpoint activities.

Answer

Audit logs

Answer

Communication Compliance

Answer

Sensitivity labels

Question 6

Your organization uses Microsoft Purview to classify data. You need to automatically apply a 'Confidential' label to documents that contain salary information. Which type of sensitivity label configuration should you use?

Accepted Answer

Auto-labeling with sensitive information types. Option B is correct because auto-labeling rules can automatically apply labels based on sensitive information types. Option A is wrong because manual labeling requires user action. Option C is wrong because default labeling applies to new documents but not based on content. Option D is wrong because mandatory labeling requires users to label but does not auto-apply.

Answer

Manual labeling

Answer

Default labeling for SharePoint libraries

Answer

Mandatory labeling policy

Question 7

Your organization uses Microsoft Purview Communication Compliance to detect harassing messages. You receive an alert for a message that appears to be a joke between colleagues. What should you do to prevent similar false positives?

Accepted Answer

Refine the policy conditions to exclude certain keywords or users. Option C is correct because you can refine the policy conditions to reduce false positives, such as excluding certain words or users. Option A is wrong because turning off the policy would stop detection entirely. Option B is wrong because training users may not address the policy configuration. Option D is wrong because the correct action is to adjust the policy, not delete it.

Answer

Train users not to joke about sensitive topics

Answer

Delete the alert and ignore future similar messages

Answer

Turn off the policy and use a different solution

Question 8

Your organization must ensure that financial reports are protected with encryption and cannot be forwarded. Which two Microsoft Purview features should you combine?

Accepted Answer

Sensitivity labels with encryption and Data Loss Prevention. Option D is correct because sensitivity labels can apply encryption, and DLP can block forwarding. Option A is wrong because retention policies do not encrypt or block forwarding. Option B is wrong because eDiscovery and Audit are for discovery and logging. Option C is wrong because Information Barriers restrict communication but not forwarding. Option E is wrong because Data Lifecycle Management manages retention, not forwarding.

Answer

Data Lifecycle Management and Data Loss Prevention

Answer

Retention policies and Records Management

Answer

Information Barriers and Communication Compliance

Answer

eDiscovery (Premium) and Audit (Standard)

Question 9

Your organization uses Microsoft 365 and needs to identify internal users who are sending confidential data to external domains repeatedly. Which Microsoft Purview solution should you use?

Accepted Answer

Insider Risk Management. Option B is correct because Insider Risk Management can detect patterns of risky behavior like repeated data exfiltration. Option A is wrong because DLP blocks individual incidents but does not detect patterns. Option C is wrong because Audit logs show events but do not analyze patterns. Option D is wrong because Communication Compliance monitors communications for policy violations, not exfiltration patterns.

Answer

Data Loss Prevention

Answer

Audit (Premium)

Answer

Communication Compliance

Question 10

Your organization has a Microsoft Purview retention policy that retains SharePoint documents for 5 years. After 5 years, you want an administrator to review and approve deletion. Which configuration is required?

Accepted Answer

Configure a disposition review at the end of the retention period. Option D is correct because disposition review allows manual review before permanent deletion. Option A is wrong because automatic deletion would delete without review. Option B is wrong because retention labels can be part of a disposition workflow but disposition review is the specific feature. Option C is wrong because eDiscovery does not manage disposition.

Answer

Apply a retention label and enable disposition review

Answer

Use eDiscovery (Premium) to export and then delete

Answer

Set the retention policy to delete automatically after 5 years

Question 11

Your organization uses Microsoft Purview to manage data governance. You need to ensure that sensitive financial data containing credit card numbers is automatically detected and labeled when stored in SharePoint Online. Which compliance solution should you configure?

Accepted Answer

Information Protection auto-labeling. Option B is correct because Microsoft Purview Information Protection includes sensitive information types and auto-labeling policies that can scan and apply sensitivity labels to content in SharePoint Online. Option A is incorrect because Data Lifecycle Management focuses on retention and deletion policies. Option C is incorrect because Audit solutions track activities but do not automatically label content. Option D is incorrect because eDiscovery is for legal holds and searches, not automatic labeling.

Answer

eDiscovery (Premium)

Answer

Data Lifecycle Management

Answer

Audit (Premium)

Question 12

A company is implementing Microsoft Purview Communication Compliance to detect inappropriate messages. They need to monitor Microsoft Teams channel messages and chat messages for potential policy violations. Which configuration is required?

Accepted Answer

Configure a Communication Compliance policy that includes Teams messages as the supervised communication channel.. Option A is correct because Communication Compliance policies must include a policy condition that selects Teams messages as the source. Option B is wrong because Communication Compliance supports Teams messages natively. Option C is wrong because enabling Teams-only mode is not required. Option D is wrong because Exchange Online retention policies are not needed for Communication Compliance.

Answer

Enable Microsoft Purview Data Loss Prevention (DLP) policies for Teams.

Answer

Set up an Exchange Online retention policy to retain Teams messages.

Answer

Deploy a third-party archiving solution for Teams messages.

Question 13

Refer to the exhibit. The JSON snippet shows a sensitivity label configuration. What is the purpose of the 'SensitiveInfoTypes' property in this label?

Accepted Answer

It specifies the sensitive information types that trigger automatic labeling.. Option B is correct because 'SensitiveInfoTypes' defines the conditions that automatically apply the label based on detected sensitive data. Option A is wrong because condition sets are separate. Option C is wrong because it does not block access. Option D is wrong because it does not create a retention policy.

Answer

It sets the retention period for content with this label.

Answer

It defines the user groups that can apply this label manually.

Answer

It configures the encryption settings for the label.

Question 14

Your organization uses Microsoft Purview Records Management to manage high-value contracts. You need to ensure that once a contract is declared as a record, it cannot be modified or deleted by any user, including administrators. Which type of record should you use?

Accepted Answer

Regulatory record. Option C is correct because Regulatory records provide the highest level of protection and cannot be modified or deleted by anyone. Option A is wrong because regular retention labels do not lock content. Option B is wrong because event-based retention is for time-based triggers. Option D is wrong because disposition review is for review before deletion.

Answer

Disposition review

Answer

Event-based retention policy

Answer

Retention label with default settings

Question 15

A multinational corporation must comply with the EU General Data Protection Regulation (GDPR). They need to respond to a data subject access request (DSAR) by searching for personal data across Exchange Online, SharePoint Online, and OneDrive for Business. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Premium). Option D is correct because eDiscovery (Premium) can search across multiple data sources including Exchange, SharePoint, and OneDrive for DSARs. Option A is wrong because Data Lifecycle Management does not search content. Option B is wrong because Audit logs do not provide content search. Option C is wrong because Data Loss Prevention is for preventing data leaks, not searching.

Answer

Data Lifecycle Management

Answer

Audit (Premium)

Answer

Data Loss Prevention (DLP)