SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 20 — 15 Questions

Question 1

Your organization wants to automatically retain all customer emails for 7 years and then delete them. Which Microsoft Purview feature should you configure?

Accepted Answer

Data Lifecycle Management retention policy. Microsoft Purview Data Lifecycle Management retention policies are designed to automatically retain and then delete content (e.g., Exchange emails, SharePoint files, Teams messages) based on a specified retention period. Configuring a retention policy with a 7-year retention period and a delete action after that period meets the requirement to retain customer emails for 7 years and then delete them.

Answer

Information Protection sensitivity labels

Answer

Audit log retention

Answer

eDiscovery hold

Question 2

Refer to the exhibit. You are reviewing a Communication Compliance policy. What does this policy do when a user sends an email containing EU GDPR PII to privacy@contoso.com?

Accepted Answer

It notifies the policy owner and generates a case for investigation.. Communication Compliance policies in Microsoft 365 are designed to detect and investigate policy violations, not to enforce real-time blocking or automated deletion. When a user sends an email containing EU GDPR PII to a specified recipient like privacy@contoso.com, the policy triggers an alert, notifies the policy owner, and generates a case for investigation in the Compliance Center. This allows organizations to review and remediate potential data privacy violations without disrupting email flow.

Answer

It blocks the email from being sent.

Answer

It automatically deletes the email after 30 days.

Answer

It applies a sensitivity label to the email.

Question 3

A company uses Microsoft Purview Data Loss Prevention (DLP) to protect sensitive data. They want to receive alerts when a user attempts to share a file containing personally identifiable information (PII) via email. Which DLP rule component is used to define the notification action?

Accepted Answer

Actions. In Microsoft Purview DLP, the 'Actions' component defines what happens when a DLP rule is triggered, including sending notifications or alerts to administrators. For the scenario of receiving alerts when a user attempts to share PII via email, the notification action is configured within the rule's Actions section. Conditions define what data to match, Locations specify where to monitor, and Exceptions refine rule scope, but only Actions contain the notification settings.

Answer

Conditions

Answer

Location

Answer

Exceptions

Question 4

Refer to the exhibit. An administrator created a retention label with the settings shown. What is the behavior of this label when applied to content?

Accepted Answer

It retains content for 7 years and then automatically deletes it.. The retention label is configured with a retention period of 7 years and an action of 'Delete items automatically when the retention period ends.' Since no disposition review is enabled, the content will be automatically deleted after 7 years. This matches option C exactly.

Answer

It retains content for 5 years and then applies a disposition review.

Answer

It marks content as a regulatory record and prevents deletion.

Answer

It retains content indefinitely with no deletion.

Question 5

Which TWO of the following are Microsoft Purview compliance solutions?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) is a Microsoft Purview compliance solution that helps organizations detect and prevent the accidental or intentional sharing of sensitive information, such as credit card numbers or personally identifiable information (PII), across email, SharePoint, OneDrive, and endpoints. eDiscovery is another Purview compliance solution that allows legal and compliance teams to search, hold, and export content from Microsoft 365 services for litigation or investigation purposes. Both are core capabilities within the Microsoft Purview compliance portal, distinct from identity, device management, or cloud security tools.

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Answer

Microsoft Defender for Cloud

Question 6

Which THREE of the following are capabilities of Microsoft Purview Information Protection?

Accepted Answer

Auto-labeling for sensitive data. Microsoft Purview Information Protection provides auto-labeling for sensitive data (A), which uses trainable classifiers and sensitive information types to automatically apply labels to content in services like SharePoint, OneDrive, and Exchange. It also provides sensitivity labels (C), the core classification mechanism that lets organizations tag and classify data by sensitivity level across Microsoft 365 apps and services. Encryption and rights protection (D) is another core capability, as sensitivity labels can apply Azure Rights Management (Azure RMS) encryption and usage rights so that only authorized users can access protected content. The unmarked options do not belong: communication monitoring (B) is a capability of Microsoft Purview Communication Compliance, and retention policies (E) fall under Microsoft Purview Data Lifecycle Management rather than Information Protection.

Answer

Communication monitoring

Answer

Retention policies

Question 7

Which TWO of the following are required to use Microsoft Purview Audit (Premium)?

Accepted Answer

Unified audit log enabled in the Microsoft 365 Defender portal. Option A is correct because Microsoft Purview Audit (Premium) builds on the unified audit log, so auditing must first be turned on in the Microsoft 365 Defender portal (or via Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true) before premium features such as longer retention and high-value events can be captured. Option B is correct because Audit (Premium) capabilities are licensed through Microsoft 365 E5/A5 (or the E5/A5 Compliance add-on) assigned to each user whose premium audit data is generated. Option C is not required because audit records are stored in Microsoft's service, not in a customer Azure subscription. Option D is not required because Power BI Pro is unrelated to audit ingestion or retention. Option E is not required because Microsoft Sentinel is a separate SIEM product and is not a prerequisite for Audit (Premium).

Answer

An Azure subscription for log storage

Answer

Power BI Pro licenses for all users

Answer

Microsoft Sentinel enabled

Question 8

Refer to the exhibit. An administrator runs this PowerShell command. What is the purpose of this command?

Accepted Answer

To retrieve audit records of file access and modifications in the HR SharePoint site from the last 90 days.. The PowerShell cmdlet `Search-UnifiedAuditLog` is used to retrieve audit records from the Microsoft 365 unified audit log. The `-StartDate` and `-EndDate` parameters define the time range (last 90 days), and the `-RecordType` parameter filters for SharePoint audit events. The `-Operations` parameter with `FileAccessed` and `FileModified` specifies that only file access and modification events should be returned, making this command's purpose to retrieve audit records of file access and modifications in the HR SharePoint site from the last 90 days.

Answer

To set a retention policy for the HR site.

Answer

To apply a retention label to all files in the HR site.

Answer

To delete all files in the HR site that were accessed in the last 90 days.

Question 9

Your organization uses Microsoft Purview Data Lifecycle Management. You need to ensure that content in a SharePoint site is retained for 3 years after the last modification date. What should you create?

Accepted Answer

A static retention policy with a 3-year duration. A static retention policy can be configured to retain content for a specific duration (e.g., 3 years) and to start the retention period based on the last modification date of the items. This directly fulfills the requirement. Adaptive retention policies are used to dynamically define the scope of the policy (which users, groups, or sites are included) based on attributes, not to define how the retention period is calculated for individual items based on their properties like 'Last Modified Date'. The 'Last Modified Date' as a retention start point is a standard option available when configuring retention settings within both static policies and retention labels.

Answer

An auto-labeling policy for sensitive data

Answer

A default retention label for the library

Answer

An adaptive retention policy based on a custom date property

Question 10

Refer to the exhibit. A Microsoft Purview Data Loss Prevention (DLP) policy is configured. What does this policy do?

Accepted Answer

It generates an alert if more than 10 emails with the Confidential label are sent to an external recipient.. The DLP policy rule shown in the exhibit specifies an action to 'Send an alert' when the condition 'Number of emails sent to external recipients with label Confidential exceeds 10' is met. This means the policy generates an alert (e.g., via email or incident report) when more than 10 emails containing the Confidential label are sent to external recipients, without blocking the emails.

Answer

It blocks all emails sent to external recipients with the Confidential label.

Answer

It prevents internal users from sending Confidential emails to each other.

Answer

It automatically applies the Confidential label to emails sent to external recipients.

Question 11

A user accidentally shared a confidential document with an external vendor. You need to revoke access immediately for all copies, even if the file has been downloaded. Which Microsoft Purview feature should you use?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) allows you to classify, label, and protect documents and emails. When a confidential document is shared accidentally, you can use the 'Revoke Access' action on the protected file via the Microsoft Purview compliance portal or PowerShell. This revokes access for all copies, even if the file has been downloaded, because the protection travels with the file through persistent rights management.

Answer

Retention policy

Answer

Data loss prevention (DLP) policy

Answer

Audit log search

Question 12

Your organization needs to classify documents containing personally identifiable information (PII) like social security numbers. Which Microsoft Purview solution should you configure?

Accepted Answer

Information Protection. Microsoft Purview Information Protection (A) is the correct solution because it provides classification and labeling capabilities specifically designed to identify, label, and protect sensitive data such as PII (e.g., social security numbers). It uses trainable classifiers and exact data match (EDM) to automatically detect sensitive content and apply appropriate protection actions like encryption or access restrictions.

Answer

Records Management

Answer

Auditing

Answer

Communication Compliance

Question 13

Your organization uses Microsoft Purview to manage data lifecycle. You need to ensure that after a project ends, all related files are automatically deleted after 3 years. What should you configure?

Accepted Answer

Create a retention label with a retention period of 3 years and a disposition action of deletion. A retention label in Microsoft Purview allows you to define a retention period and then automatically trigger a disposition action—such as permanent deletion—when that period expires. By creating a label with a 3-year retention period and setting the disposition action to 'Delete', all files tagged with that label will be automatically removed after three years, meeting the requirement without manual intervention.

Answer

Configure a DLP policy to delete files after 3 years

Answer

Create an eDiscovery case and manually delete the files

Answer

Apply a sensitivity label marked 'Project' and configure auto-deletion

Question 14

You are investigating a potential data leak. You need to find all emails that contain the word 'confidential' sent to external recipients in the last 30 days. Which Microsoft Purview tool should you use?

Accepted Answer

Content Search. Content Search (option C) is the correct tool because it allows you to perform targeted eDiscovery searches across Exchange Online mailboxes, including searching for specific keywords like 'confidential' and filtering by date range and recipient type (external recipients). It provides the exact capability to locate all emails containing the word 'confidential' sent to external recipients in the last 30 days, making it the appropriate choice for investigating a potential data leak.

Answer

Communication Compliance

Answer

Audit Log Search

Answer

Data loss prevention (DLP) policy

Question 15

Your organization needs to monitor Microsoft Teams chats for inappropriate language and alert compliance officers. Which Microsoft Purview solution should you implement?

Accepted Answer

Communication Compliance. Communication Compliance is the correct solution because it is specifically designed to detect inappropriate language, such as profanity, harassment, or sensitive content, in Microsoft Teams chats and other communication channels. It uses built-in trainable classifiers and customizable policies to automatically flag violations and alert compliance officers, enabling proactive remediation.

Answer

eDiscovery

Answer

Auditing

Answer

Information Protection