SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 19 — 15 Questions

Question 1

Your organization wants to automatically retain all customer emails for 7 years and then delete them. Which Microsoft Purview feature should you configure?

Accepted Answer

Data Lifecycle Management retention policy. Option A is correct because Data Lifecycle Management includes retention and deletion policies for Exchange Online. Option B is wrong because Information Protection is about classification. Option C is wrong because Audit is for logging. Option D is wrong because eDiscovery is for search and hold.

Answer

Information Protection sensitivity labels

Answer

Audit log retention

Answer

eDiscovery hold

Question 2

Refer to the exhibit. You are reviewing a Communication Compliance policy. What does this policy do when a user sends an email containing EU GDPR PII to privacy@contoso.com?

Accepted Answer

It notifies the policy owner and generates a case for investigation.. Option C is correct because the policy actions are to notify the policy owner and generate a case for investigation. Option A is wrong because it does not block the email. Option B is wrong because it does not automatically delete. Option D is wrong because it does not apply a label.

Answer

It blocks the email from being sent.

Answer

It automatically deletes the email after 30 days.

Answer

It applies a sensitivity label to the email.

Question 3

A company uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. They want to receive alerts when a user attempts to share a file containing personally identifiable information (PII) via email. Which DLP rule component is used to define the notification action?

Accepted Answer

Actions. Option D is correct because DLP rules include actions like sending notifications to users or admins. Option A is wrong because conditions define what triggers the rule. Option B is wrong because exceptions override conditions. Option C is wrong because the location specifies where the rule applies.

Answer

Conditions

Answer

Location

Answer

Exceptions

Question 4

Refer to the exhibit. An administrator created a retention label with the settings shown. What is the behavior of this label when applied to content?

Accepted Answer

It retains content for 7 years and then automatically deletes it.. Option C is correct because the retention duration is 2555 days (7 years) and deletion is enabled after retention. Option A is wrong because it does not specify deletion after 5 years. Option B is wrong because record type is standard, not regulatory. Option D is wrong because the label is not locked.

Answer

It retains content for 5 years and then applies a disposition review.

Answer

It marks content as a regulatory record and prevents deletion.

Answer

It retains content indefinitely with no deletion.

Question 5

Which TWO of the following are Microsoft Purview compliance solutions?

Accepted Answer

Data Loss Prevention (DLP). A, C are correct. Data Loss Prevention (DLP) and eDiscovery are core Purview solutions. B (Microsoft Defender for Cloud) is a security solution. D (Microsoft Entra ID) is identity. E (Microsoft Intune) is endpoint management.

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Answer

Microsoft Defender for Cloud

Question 6

Which THREE of the following are capabilities of Microsoft Purview Information Protection?

Accepted Answer

Auto-labeling for sensitive data. A, C, D are correct. Sensitivity labels, auto-labeling, and encryption are key capabilities. B (retention policies) is Data Lifecycle Management. E (communication monitoring) is Communication Compliance.

Answer

Communication monitoring

Answer

Retention policies

Question 7

Which TWO of the following are required to use Microsoft Purview Audit (Premium)?

Accepted Answer

Unified audit log enabled in the Microsoft 365 Defender portal. A, D are correct. Audit (Premium) requires an appropriate license (e.g., E5) and enabling unified audit logging. B (Azure subscription) is not required. C (Microsoft Sentinel) is optional. E (Power BI) is unrelated.

Answer

An Azure subscription for log storage

Answer

Power BI Pro licenses for all users

Answer

Microsoft Sentinel enabled

Question 8

Refer to the exhibit. An administrator runs this PowerShell command. What is the purpose of this command?

Accepted Answer

To retrieve audit records of file access and modifications in the HR SharePoint site from the last 90 days.. Option B is correct because the command searches the unified audit log for file access and modification events in the HR SharePoint site from the last 90 days. Option A is wrong because it does not delete files. Option C is wrong because it does not apply labels. Option D is wrong because it does not set retention.

Answer

To set a retention policy for the HR site.

Answer

To apply a retention label to all files in the HR site.

Answer

To delete all files in the HR site that were accessed in the last 90 days.

Question 9

Your organization uses Microsoft Purview Data Lifecycle Management. You need to ensure that content in a SharePoint site is retained for 3 years after the last modification date. What should you create?

Accepted Answer

An adaptive retention policy based on a custom date property. Option A is correct because adaptive retention policies can use a custom date property like 'last modified' to trigger retention. Option B is wrong because static policies apply to all content. Option C is wrong because default labels do not use custom dates. Option D is wrong because auto-labeling is for classification.

Answer

A static retention policy with a 3-year duration

Answer

An auto-labeling policy for sensitive data

Answer

A default retention label for the library

Question 10

Refer to the exhibit. A Microsoft Purview Data Loss Prevention (DLP) policy is configured. What does this policy do?

Accepted Answer

It generates an alert if more than 10 emails with the Confidential label are sent to an external recipient.. Option B is correct because the policy alerts when more than 10 emails with the 'Confidential' label are sent to an external recipient. Option A is wrong because it blocks only after 10 emails. Option C is wrong because it monitors external recipients, not internal. Option D is wrong because it does not involve SharePoint.

Answer

It blocks all emails sent to external recipients with the Confidential label.

Answer

It prevents internal users from sending Confidential emails to each other.

Answer

It automatically applies the Confidential label to emails sent to external recipients.

Question 11

Your organization wants to automatically retain customer emails for 5 years after they are received, and then delete them. You need to configure the appropriate Microsoft Purview solution. What should you use?

Accepted Answer

Retention label published automatically. Option B is correct because retention labels can be applied automatically based on conditions (like emails containing 'customer') and can specify both retention and deletion actions. Option A is wrong because data loss prevention policies prevent sharing but do not handle retention. Option C is wrong because sensitivity labels classify and protect content but do not manage retention. Option D is wrong because eDiscovery is for searching and exporting content, not retention.

Answer

eDiscovery case

Answer

Data loss prevention (DLP) policy

Answer

Sensitivity label

Question 12

A user accidentally shared a confidential document with an external vendor. You need to revoke access immediately for all copies, even if the file has been downloaded. Which Microsoft Purview feature should you use?

Accepted Answer

Microsoft Purview Information Protection. Option D is correct because Microsoft Purview Information Protection allows the owner to revoke access to protected documents, including downloaded copies. Option A is wrong because DLP policies detect and block sharing but cannot revoke already shared files. Option B is wrong because retention policies manage lifecycle, not revocation. Option C is wrong because audit logs record events but do not enforce revocation.

Answer

Retention policy

Answer

Data loss prevention (DLP) policy

Answer

Audit log search

Question 13

Your organization needs to classify documents containing personally identifiable information (PII) like social security numbers. Which Microsoft Purview solution should you configure?

Accepted Answer

Information Protection. Option C is correct because Microsoft Purview Information Protection includes trainable classifiers and sensitive info types to automatically classify PII. Option A is wrong because Auditing tracks activities, not classification. Option B is wrong because Records Management is about retention and disposition. Option D is wrong because Communication Compliance monitors communications for policy violations.

Answer

Records Management

Answer

Auditing

Answer

Communication Compliance

Question 14

Your organization uses Microsoft Purview to manage data lifecycle. You need to ensure that after a project ends, all related files are automatically deleted after 3 years. What should you configure?

Accepted Answer

Create a retention label with a retention period of 3 years and a disposition action of deletion. Option A is correct because a retention label can be applied to project files, specifying retain for 3 years and then delete. Option B is wrong because a sensitivity label does not manage deletion. Option C is wrong because a DLP policy prevents sharing, not deletion. Option D is wrong because eDiscovery is for search and export.

Answer

Configure a DLP policy to delete files after 3 years

Answer

Create an eDiscovery case and manually delete the files

Answer

Apply a sensitivity label marked 'Project' and configure auto-deletion

Question 15

You are investigating a potential data leak. You need to find all emails that contain the word 'confidential' sent to external recipients in the last 30 days. Which Microsoft Purview tool should you use?

Accepted Answer

Content Search. Option C is correct because Content Search in Microsoft Purview can search for specific keywords in emails and filter by date and recipients. Option A is wrong because Audit Log Search tracks activities, not content. Option B is wrong because DLP policies prevent leaks but do not provide historical search. Option D is wrong because Communication Compliance monitors for policy violations but is not optimized for ad-hoc content search.

Answer

Communication Compliance

Answer

Audit Log Search

Answer

Data loss prevention (DLP) policy