SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 2 — 15 Questions

Question 1

Refer to the exhibit. A Microsoft Purview retention policy is configured as shown. A document in SharePoint is labeled as 'Highly Confidential' and was created 5 years ago. What will happen to this document?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The document will be retained for 2 more years. The retention policy retains items labeled as 'Highly Confidential' for 7 years from creation. Since the document was created 5 years ago, it will be retained until 7 years from creation (2 more years). Option A is wrong because the retention period starts from the document's creation date, not the policy's creation date. Option B is wrong because the label meets the condition. Option C is wrong because the retention is based on creation date, not 'now'.

Answer

The document will be retained for 7 years from the policy creation date

Answer

The document will be deleted immediately

Answer

The document will be retained for 7 years from now

Question 2

Which THREE of the following are features of Microsoft Purview Compliance Manager? (Select THREE.)

Accepted Answer

Compliance score and templates for custom assessments. Microsoft Purview Compliance Manager provides a **compliance score** that quantifies an organization's compliance posture and includes **templates for custom assessments** tailored to specific regulatory or organizational requirements (Option B). It also offers a library of **pre-built assessments** for common regulations like GDPR (Option C). Additionally, it details **improvement actions**, including those that are **Microsoft-managed**, to help organizations meet regulatory requirements (Option E).

Answer

Record declaration and disposition reviews

Answer

Trainable classifiers to identify sensitive content

Question 3

Which TWO of the following are examples of sensitive information types in Microsoft Purview? (Select TWO.)

Accepted Answer

Passport number. Both passport numbers and credit card numbers are classified as sensitive information types in Microsoft Purview. They are examples of predefined, pattern-based data identifiers (often using regex and checksums) that can be automatically detected and protected by Data Loss Prevention (DLP) policies. Microsoft Purview includes a wide range of built-in sensitive information types for various forms of personally identifiable information (PII) and financial data, enabling automatic classification and policy enforcement.

Answer

Public holiday list

Answer

Employee name

Answer

Internal project code name

Question 4

Which THREE of the following are retention actions in Microsoft Purview Data Lifecycle Management? (Select THREE.)

Accepted Answer

Delete the content after a specified period. Microsoft Purview Data Lifecycle Management uses retention policies and retention labels to manage the lifecycle of data. These policies and labels can be configured to perform three primary retention actions: 1. Retain content for a specified period (Option E), which can be indefinitely or for a set duration. 2. Delete content after a specified period (Option A), often used for content that doesn't require long-term retention but needs to be disposed of after a certain age. 3. Retain content for a specified period and then delete it (Option D), which combines both retention and eventual disposal.

Answer

Automatically archive the content

Answer

Apply a sensitivity label to the content

Question 5

You are designing a compliance solution for a healthcare organization that must comply with HIPAA. You need to ensure that patient health information (PHI) is encrypted at rest in Microsoft 365. What should you use?

Accepted Answer

Sensitivity labels. Sensitivity labels are the most appropriate solution. They allow organizations to classify data and apply protection, including encryption (using Azure Information Protection), to sensitive information like PHI across various Microsoft 365 services such as Exchange Online, SharePoint Online, and OneDrive for Business. This ensures PHI is encrypted at rest regardless of whether it's in an email, document, or other file type. While Microsoft Purview Message Encryption handles email, sensitivity labels offer a broader, more integrated approach to data protection and encryption at rest within Microsoft 365.

Answer

Microsoft Purview Message Encryption

Answer

Data Loss Prevention (DLP) policies

Answer

Customer Key

Question 6

Which TWO of the following are required to use Microsoft Purview Audit (Premium)?

Accepted Answer

Unified audit log enabled in the Microsoft 365 Defender portal. Microsoft Purview Audit (Premium) requires the unified audit log to be enabled in the Microsoft 365 Defender portal. This setting activates the underlying audit pipeline that captures and stores all audited events, which is a prerequisite for both standard and premium audit features. Without the unified audit log enabled, no audit records are generated, making premium capabilities like high-value events and longer retention unavailable. Additionally, an E5 or A5 license (or an equivalent add-on) is required for each user to access the advanced features and longer retention periods offered by Audit (Premium).

Answer

An Azure subscription for log storage

Answer

Power BI Pro licenses for all users

Answer

Microsoft Sentinel enabled

Question 7

Your organization uses Microsoft Purview Data Lifecycle Management. You need to ensure that content in a SharePoint site is retained for 3 years after the last modification date. What should you create?

Accepted Answer

A static retention policy with a 3-year duration. A static retention policy can be configured to retain content for a specific duration (e.g., 3 years) and to start the retention period based on the last modification date of the items. This directly fulfills the requirement. Adaptive retention policies are used to dynamically define the scope of the policy (which users, groups, or sites are included) based on attributes, not to define how the retention period is calculated for individual items based on their properties like 'Last Modified Date'. The 'Last Modified Date' as a retention start point is a standard option available when configuring retention settings within both static policies and retention labels.

Answer

An auto-labeling policy for sensitive data

Answer

A default retention label for the library

Answer

An adaptive retention policy based on a custom date property

Question 8

Which THREE actions can be performed using a Microsoft Purview Data Loss Prevention (DLP) policy?

Accepted Answer

Notify users via policy tip when they try to share sensitive data. Microsoft Purview Data Loss Prevention (DLP) policies are designed to identify, monitor, and protect sensitive information across various Microsoft 365 services. Key actions include: notifying users via policy tips when they try to share sensitive data (Option A), blocking sharing of sensitive data with external users (Option B), and automatically applying sensitivity labels to content that contains sensitive information (Option E).

Answer

Automatically retain emails for 7 years

Answer

Encrypt emails containing sensitive data

Question 9

A Microsoft Purview retention policy is configured to retain emails for 365 days and then delete them. What will happen to emails after 365 days?

Accepted Answer

Emails will be retained for 365 days and then deleted. The retention policy is configured to retain emails for 365 days and then delete them. In Microsoft Purview, when a retention policy specifies a retention period followed by a deletion action, content is preserved for the entire duration and then permanently removed at the end of the period. Therefore, after 365 days, the emails will be deleted automatically.

Answer

Emails will be deleted immediately

Answer

Emails will be retained and then reviewed for deletion

Answer

Emails will be kept indefinitely

Question 10

Refer to the exhibit. A Microsoft Purview sensitivity label is configured as shown. What is the purpose of this label?

Accepted Answer

To encrypt the document and add a visual marking. The label configuration includes encryption and a visual marking (header/footer). These settings ensure that documents with this label are protected and clearly identified. Option A is incorrect because while sensitivity labels can restrict sharing, preventing sharing with external users via DLP is a function of DLP policies, which are separate from the label's direct configuration for encryption and visual marking. Option B is incorrect because the label does not specify auto-labeling conditions; auto-labeling requires a separate policy. Option D is incorrect because retention of documents is managed by retention labels and retention policies, not sensitivity labels.

Answer

To prevent sharing with external users via DLP

Answer

To automatically apply the label based on content

Answer

To automatically retain the document for a specific period

Question 11

Which THREE capabilities does Microsoft Purview provide to help meet regulatory compliance requirements?

Accepted Answer

Audit logging. Microsoft Purview offers audit logging, retention policies, data classification, insider risk management, and communication compliance. All five options are distinct capabilities within Microsoft Purview that directly help organizations meet various regulatory compliance requirements. The distinction between 'core' and 'related but not core' is not accurate in the context of the SC-900 curriculum, which lists all these as capabilities.

Question 12

Which THREE actions can be performed using Microsoft Purview compliance portal?

Accepted Answer

Conduct eDiscovery searches. The Microsoft Purview compliance portal is a central hub for managing an organization's compliance needs. It provides tools for: eDiscovery searches, allowing authorized users to search for content across various Microsoft 365 services for legal or internal investigations; creating and managing retention policies as part of data lifecycle management to define how long data should be kept or deleted; and managing sensitivity labels as part of information protection to classify and protect sensitive data.

Answer

Manage user licenses

Answer

Configure conditional access policies

Question 13

Your organization, Contoso Ltd., is a multinational company with offices in the US, EU, and Asia. You are the compliance administrator. The legal team requires that all documents containing personally identifiable information (PII) of EU citizens be retained for 10 years after the last modification. Additionally, any document classified as 'Highly Confidential' must be encrypted and have a custom header 'CONFIDENTIAL - DO NOT FORWARD' when shared externally. You also need to ensure that only users in the EU region can access documents containing EU PII. You have Microsoft Purview with the necessary licenses. You need to design a compliance solution that meets these requirements with minimal administrative overhead. What should you do?

Accepted Answer

Create a retention label for 10-year retention based on PII content; create a sensitivity label 'Highly Confidential' with encryption and header; configure a conditional access policy in Microsoft Entra ID to restrict access to EU users for documents labeled 'Highly Confidential'. Option B correctly identifies using a retention label for PII content and a sensitivity label for 'Highly Confidential' documents with encryption and headers. However, the conditional access policy described in Option B is intended to restrict access to 'Highly Confidential' documents to EU users, whereas the requirement specifies restricting access to *documents containing EU PII* to EU users. While Conditional Access can be integrated with sensitivity labels to enforce location-based access conditions (e.g., requiring users from specific locations to access content protected by a certain label), the target of the policy in the option does not align with the specific requirement for EU PII documents. The explanation also repeats this misalignment.

Answer

Create a Data Loss Prevention (DLP) policy to block external sharing of PII; create a retention policy for 10 years on all content; use sensitivity labels for encryption

Answer

Use a single unified label that combines retention and sensitivity settings; then configure an auto-labeling policy to apply it; use a device compliance policy to restrict access

Answer

Create a retention policy for 10 years on all content; use sensitivity labels with encryption; then configure a DLP policy to add the header when shared externally

Question 14

A company must implement data classification labels in Microsoft Purview to protect sensitive information. Which TWO actions are required to create and publish a sensitivity label?

Accepted Answer

Create the label in the Microsoft Purview compliance portal.. Sensitivity labels are created in the Microsoft Purview compliance portal (formerly Microsoft 365 compliance center), which is the central management interface for defining classification and protection settings. Without creating the label in Purview, there is no label object to apply or publish. Once created, labels must then be published using a label policy to make them available to users and services for application.

Answer

Deploy the label using Microsoft Intune configuration profiles.

Answer

Define the label scope to include SharePoint and OneDrive.

Answer

Configure auto-labeling rules in Microsoft 365 Defender.

Question 15

Refer to the exhibit. The JSON shows a Microsoft Purview retention policy configuration. After applying this policy, an administrator notices that emails in user mailboxes older than one year are being permanently deleted instead of being retained. Which setting should the administrator check first to resolve this issue?

Accepted Answer

The 'RetentionType' is set to 'KeepAndDelete', which deletes after retention period.. The 'KeepAndDelete' retention type retains items for the specified duration and then permanently deletes them. In this scenario, emails older than one year are deleted after the 365-day retention period expires. Checking the 'RetentionType' setting is the first step to identify why emails are being deleted instead of retained.

Option B is incorrect because the 'Locations' array includes all necessary workloads (Exchange, SharePoint, OneDrive). The issue is not related to missing workloads.

Option C is incorrect because the 'RetentionDuration' of 365 days is appropriate for a one-year retention policy. The problem is the retention type, not the duration.

Option D is incorrect because the 'RetentionTrigger' set to 'When items were created' is standard for email retention. Changing it to 'last modified' would not prevent deletion; the deletion occurs due to the 'KeepAndDelete' type, not the trigger.

Answer

The 'Locations' array does not include all necessary workloads.

Answer

The 'RetentionDuration' is too short for email retention.

Answer

The 'RetentionTrigger' should be 'When items were last modified' instead of 'created'.