SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 20 — 15 Questions

Question 1

Which TWO of the following are Microsoft Purview compliance solutions?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) is a Microsoft Purview compliance solution that helps organizations detect and prevent the accidental or intentional sharing of sensitive information, such as credit card numbers or personally identifiable information (PII), across email, SharePoint, OneDrive, and endpoints. eDiscovery is another Purview compliance solution that allows legal and compliance teams to search, hold, and export content from Microsoft 365 services for litigation or investigation purposes. Both are core capabilities within the Microsoft Purview compliance portal, distinct from identity, device management, or cloud security tools.

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Answer

Microsoft Defender for Cloud

Question 2

Which THREE of the following are capabilities of Microsoft Purview Information Protection?

Accepted Answer

Auto-labeling for sensitive data. A, C, D are correct. Sensitivity labels, auto-labeling, and encryption are key capabilities of Microsoft Purview Information Protection. B (Communication monitoring) is a Communication Compliance capability. E (Retention policies) is Data Lifecycle Management.

Answer

Communication monitoring

Answer

Retention policies

Question 3

Refer to the exhibit. An administrator runs this PowerShell command. What is the purpose of this command?

Accepted Answer

To retrieve audit records of file access and modifications in the HR SharePoint site from the last 90 days.. The PowerShell cmdlet `Search-UnifiedAuditLog` is used to retrieve audit records from the Microsoft 365 unified audit log. The `-StartDate` and `-EndDate` parameters define the time range (last 90 days), and the `-RecordType` parameter filters for SharePoint audit events. The `-Operations` parameter with `FileAccessed` and `FileModified` specifies that only file access and modification events should be returned, making this command's purpose to retrieve audit records of file access and modifications in the HR SharePoint site from the last 90 days.

Answer

To set a retention policy for the HR site.

Answer

To apply a retention label to all files in the HR site.

Answer

To delete all files in the HR site that were accessed in the last 90 days.

Question 4

Refer to the exhibit. A Microsoft Purview Data Loss Prevention (DLP) policy is configured. What does this policy do?

Accepted Answer

It generates an alert if more than 10 emails with the Confidential label are sent to an external recipient.. The DLP policy rule shown in the exhibit specifies an action to 'Send an alert' when the condition 'Number of emails sent to external recipients with label Confidential exceeds 10' is met. This means the policy generates an alert (e.g., via email or incident report) when more than 10 emails containing the Confidential label are sent to external recipients, without blocking the emails.

Answer

It blocks all emails sent to external recipients with the Confidential label.

Answer

It prevents internal users from sending Confidential emails to each other.

Answer

It automatically applies the Confidential label to emails sent to external recipients.

Question 5

Your organization wants to automatically retain customer emails for 5 years after they are received, and then delete them. You need to configure the appropriate Microsoft Purview solution. What should you use?

Accepted Answer

Retention label published automatically. Retention labels in Microsoft Purview can be published automatically to apply to emails based on conditions (such as being received from customers), and they can specify both a retention period (e.g., 5 years) and a disposal action (deletion). Option A is incorrect because eDiscovery cases are used for legal hold and content search, not automated retention. Option B is incorrect because DLP policies focus on preventing data loss through sharing control, not retention. Option C is incorrect because sensitivity labels are primarily for classification and protection, though they can include retention settings; however, the question specifically asks for a retention label published automatically, which is the correct solution.

Answer

eDiscovery case

Answer

Data loss prevention (DLP) policy

Answer

Sensitivity label

Question 6

A user accidentally shared a confidential document with an external vendor. You need to revoke access immediately for all copies, even if the file has been downloaded. Which Microsoft Purview feature should you use?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) allows you to classify, label, and protect documents and emails. When a confidential document is shared accidentally, you can use the 'Revoke Access' action on the protected file via the Microsoft Purview compliance portal or PowerShell. This revokes access for all copies, even if the file has been downloaded, because the protection travels with the file through persistent rights management.

Answer

Retention policy

Answer

Data loss prevention (DLP) policy

Answer

Audit log search

Question 7

Your organization needs to classify documents containing personally identifiable information (PII) like social security numbers. Which Microsoft Purview solution should you configure?

Accepted Answer

Information Protection. Microsoft Purview Information Protection (A) is the correct solution because it provides classification and labeling capabilities specifically designed to identify, label, and protect sensitive data such as PII (e.g., social security numbers). It uses trainable classifiers and exact data match (EDM) to automatically detect sensitive content and apply appropriate protection actions like encryption or access restrictions.

Answer

Records Management

Answer

Auditing

Answer

Communication Compliance

Question 8

Your organization uses Microsoft Purview to manage data lifecycle. You need to ensure that after a project ends, all related files are automatically deleted after 3 years. What should you configure?

Accepted Answer

Create a retention label with a retention period of 3 years and a disposition action of deletion. A retention label in Microsoft Purview allows you to define a retention period and then automatically trigger a disposition action—such as permanent deletion—when that period expires. By creating a label with a 3-year retention period and setting the disposition action to 'Delete', all files tagged with that label will be automatically removed after three years, meeting the requirement without manual intervention.

Answer

Configure a DLP policy to delete files after 3 years

Answer

Create an eDiscovery case and manually delete the files

Answer

Apply a sensitivity label marked 'Project' and configure auto-deletion

Question 9

You are investigating a potential data leak. You need to find all emails that contain the word 'confidential' sent to external recipients in the last 30 days. Which Microsoft Purview tool should you use?

Accepted Answer

Content Search. Content Search (option C) is the correct tool because it allows you to perform targeted eDiscovery searches across Exchange Online mailboxes, including searching for specific keywords like 'confidential' and filtering by date range and recipient type (external recipients). It provides the exact capability to locate all emails containing the word 'confidential' sent to external recipients in the last 30 days, making it the appropriate choice for investigating a potential data leak.

Answer

Communication Compliance

Answer

Audit Log Search

Answer

Data loss prevention (DLP) policy

Question 10

Your organization needs to monitor Microsoft Teams chats for inappropriate language and alert compliance officers. Which Microsoft Purview solution should you implement?

Accepted Answer

Communication Compliance. Communication Compliance is the correct solution because it is specifically designed to detect inappropriate language, such as profanity, harassment, or sensitive content, in Microsoft Teams chats and other communication channels. It uses built-in trainable classifiers and customizable policies to automatically flag violations and alert compliance officers, enabling proactive remediation.

Answer

eDiscovery

Answer

Auditing

Answer

Information Protection

Question 11

Your organization uses Microsoft 365 and wants to automatically quarantine suspicious emails before they reach users' inboxes. Which solution should you configure?

Accepted Answer

Microsoft Defender for Office 365. Microsoft Defender for Office 365 includes Exchange Online Protection (EOP) and advanced threat protection features such as Safe Attachments and Safe Links. These capabilities automatically quarantine suspicious emails—including those with malicious attachments, phishing URLs, or spoofed senders—before they reach user inboxes, based on policy-defined actions like 'Quarantine message'.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Question 12

You are designing a compliance solution for a global company. You need to ensure that data stored in SharePoint Online is not accessible from a specific geographic region. Which Microsoft Purview feature should you use?

Accepted Answer

Compliance boundaries. This question is problematic because no Microsoft Purview feature listed directly restricts SharePoint Online data access based on geographic region. Compliance boundaries (A) are for eDiscovery scoping, not access control. Data loss prevention policies (B) prevent data loss but do not block access by region. Retention policies (C) manage data lifecycle, not access. Sensitivity labels (D) classify and protect data but cannot enforce geographic restrictions on their own. For this requirement, you would use a non-Purview feature such as Conditional Access in Microsoft Entra ID or Multi-Geo capabilities.

Answer

Data loss prevention policy

Answer

Retention policy

Answer

Sensitivity labels

Question 13

Your organization needs to create a policy that prevents users from sharing credit card numbers in emails. Which Microsoft Purview solution should you configure?

Accepted Answer

Data loss prevention (DLP) policy. Data loss prevention (DLP) policies in Microsoft Purview are specifically designed to identify, monitor, and automatically protect sensitive information—such as credit card numbers—across Exchange Online, SharePoint, OneDrive, and Teams. By configuring a DLP policy with a credit card number sensitive info type, the organization can block users from sending emails containing those patterns, either by preventing the email from being sent or by triggering a policy tip. This directly addresses the requirement to prevent sharing of credit card numbers in emails.

Answer

Communication Compliance

Answer

Retention policy

Answer

eDiscovery

Question 14

Which TWO Microsoft Purview solutions can be used to automatically classify sensitive data at rest?

Accepted Answer

Data Lifecycle Management. Data Lifecycle Management (DLM) automatically classifies sensitive data at rest by applying retention labels based on sensitive content detection, such as credit card numbers or social security numbers, using trainable classifiers or exact data match. Information Protection (IP) extends this by enabling automatic labeling of documents and emails based on sensitive information types, ensuring data is classified and protected while stored in SharePoint, OneDrive, or Exchange Online.

Answer

Communication Compliance

Answer

eDiscovery

Answer

Auditing

Question 15

Which TWO Microsoft Purview features allow you to monitor and manage data across hybrid environments (on-premises and cloud)?

Accepted Answer

Microsoft Purview Data Map. Microsoft Purview Data Map is correct because it provides a unified map of data assets across on-premises, multi-cloud, and SaaS sources, enabling automated scanning and classification of sensitive data. Microsoft Purview Data Estate Insights is correct because it offers monitoring and governance dashboards that track data movement, usage, and compliance posture across hybrid environments, giving administrators visibility into both on-premises and cloud data estates.

Answer

eDiscovery

Answer

Information Protection

Answer

Communication Compliance