SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 20 — 15 Questions

Question 1

Your organization needs to monitor Microsoft Teams chats for inappropriate language and alert compliance officers. Which Microsoft Purview solution should you implement?

Accepted Answer

Communication Compliance. Option B is correct because Communication Compliance is designed to detect offensive language in communications. Option A is wrong because Information Protection classifies data. Option C is wrong because Auditing tracks activities. Option D is wrong because eDiscovery is for legal investigations.

Answer

eDiscovery

Answer

Auditing

Answer

Information Protection

Question 2

Your organization uses Microsoft 365 and wants to automatically quarantine suspicious emails before they reach users' inboxes. Which solution should you configure?

Accepted Answer

Microsoft Defender for Office 365. Option A is correct because Microsoft Defender for Office 365 (part of Microsoft 365 Defender) includes Safe Attachments and Safe Links that can quarantine malicious emails. Option B is wrong because Microsoft Purview focuses on compliance, not security. Option C is wrong because Microsoft Intune manages devices. Option D is wrong because Microsoft Sentinel is a SIEM, not an email security solution.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Question 3

You are designing a compliance solution for a global company. You need to ensure that data stored in SharePoint Online is not accessible from a specific geographic region. Which Microsoft Purview feature should you use?

Accepted Answer

Compliance boundaries. Option B is correct because Compliance Boundaries in Microsoft Purview allow you to define data access restrictions based on geographical boundaries. Option A is wrong because retention policies manage lifecycle, not access. Option C is wrong because sensitivity labels classify data but do not restrict access by region. Option D is wrong because DLP policies prevent sharing, not access.

Answer

Data loss prevention policy

Answer

Retention policy

Answer

Sensitivity labels

Question 4

Your organization needs to create a policy that prevents users from sharing credit card numbers in emails. Which Microsoft Purview solution should you configure?

Accepted Answer

Data loss prevention (DLP) policy. Option A is correct because Data Loss Prevention (DLP) policies can detect and block sharing of sensitive information like credit card numbers. Option B is wrong because Retention policies manage lifecycle. Option C is wrong because eDiscovery is for search. Option D is wrong because Communication Compliance monitors for policy violations, not specific data types.

Answer

Communication Compliance

Answer

Retention policy

Answer

eDiscovery

Question 5

Which TWO Microsoft Purview solutions can be used to automatically classify sensitive data at rest?

Accepted Answer

Data Lifecycle Management. Options A and B are correct. Information Protection includes auto-labeling policies that can classify data at rest. Data Lifecycle Management includes retention labels that can classify data based on conditions. Option C is wrong because Communication Compliance monitors communications. Option D is wrong because eDiscovery is for search. Option E is wrong because Auditing tracks activities.

Answer

Communication Compliance

Answer

eDiscovery

Answer

Auditing

Question 6

Which THREE actions can be performed using a Microsoft Purview Data Loss Prevention (DLP) policy?

Accepted Answer

Notify users via policy tip when they try to share sensitive data. Options A, C, and D are correct. DLP policies can block sharing of sensitive data, notify users with policy tips, and automatically apply sensitivity labels. Option B is wrong because automatic retention is managed by retention policies, not DLP. Option E is wrong because encryption is applied by sensitivity labels, not DLP directly.

Answer

Automatically retain emails for 7 years

Answer

Encrypt emails containing sensitive data

Question 7

Which TWO Microsoft Purview features allow you to monitor and manage data across hybrid environments (on-premises and cloud)?

Accepted Answer

Microsoft Purview Data Map. Options B and D are correct. Microsoft Purview Data Map provides a unified map of data assets across on-prem and cloud. Microsoft Purview Data Estate Insights gives visibility into data estate health and governance. Option A is wrong because Information Protection is primarily cloud-focused. Option C is wrong because eDiscovery is for search. Option E is wrong because Communication Compliance monitors communications.

Answer

eDiscovery

Answer

Information Protection

Answer

Communication Compliance

Question 8

Refer to the exhibit. A Microsoft Purview retention policy is configured as shown. What will happen to emails after 365 days?

Accepted Answer

Emails will be retained for 365 days and then deleted. Option D is correct because the policy has 'KeepAndDelete' as the retention action, meaning items will be retained for 365 days and then deleted. Option A is wrong because the retention action is not just keep; it includes deletion. Option B is wrong because the policy does not specify a review. Option C is wrong because deletion happens after 365 days, not immediately.

Answer

Emails will be deleted immediately

Answer

Emails will be retained and then reviewed for deletion

Answer

Emails will be kept indefinitely

Question 9

Refer to the exhibit. A Microsoft Purview sensitivity label is configured as shown. What is the purpose of this label?

Accepted Answer

To encrypt the document and add a visual marking. Option B is correct because the label enables encryption and adds a header/footer marking. Option A is wrong because the label does not specify retention. Option C is wrong because the label does not have a DLP policy linked. Option D is wrong because the label does not include any auto-labeling configuration.

Answer

To prevent sharing with external users via DLP

Answer

To automatically apply the label based on content

Answer

To automatically retain the document for a specific period

Question 10

Refer to the exhibit. A Microsoft Purview DLP policy is configured as shown. What will happen when a user tries to email an external recipient a document containing a credit card number?

Accepted Answer

The email will be blocked and the user will receive a notification. Option A is correct because the policy has actions to block access and notify the user. Option B is wrong because the email is blocked, not quarantined. Option C is wrong because the email is blocked, not sent. Option D is wrong because there is no mention of logging; the policy blocks access.

Answer

The email will be sent but the attachment will be removed

Answer

The email will be delivered and the admin will be alerted

Answer

The email will be sent and the event will be logged for audit

Question 11

A company wants to automatically classify and protect sensitive documents stored in SharePoint Online. The compliance administrator needs to create a policy that detects credit card numbers and applies encryption. Which Microsoft Purview solution should the administrator use?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling in Microsoft Purview Information Protection can automatically classify and encrypt documents containing sensitive data like credit card numbers. Data Lifecycle Management (formerly retention) focuses on retention and deletion, not automatic protection. Communication Compliance monitors communications for policy violations. Microsoft Entra ID is an identity service.

Answer

Communication Compliance

Answer

Microsoft Entra ID

Answer

Data Lifecycle Management

Question 12

A compliance officer needs to monitor internal emails for inappropriate language and potential data leaks. The officer wants to detect policy violations and allow users to report concerns. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Communication Compliance. Communication Compliance in Microsoft Purview is designed to detect policy violations in communications, including emails, and provides a way for users to report concerns. Information Protection focuses on classification and protection. Data Lifecycle Management handles retention. Audit logs record activities but do not proactively scan communications.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Information Protection

Question 13

A multinational organization must comply with GDPR and local data residency requirements. The compliance team needs to ensure that personal data is not stored in regions outside the permitted locations. Which Microsoft Purview capability should they use to discover and map personal data across the organization's data estate?

Accepted Answer

Microsoft Purview Data Map. Microsoft Purview Data Map provides automated data discovery and classification across on-premises, multi-cloud, and SaaS data sources, enabling organizations to understand where personal data resides. Data Lifecycle Management handles retention, not discovery. Audit logs record activities but do not map data. Compliance Manager is for managing compliance assessments.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Audit

Question 14

An organization wants to automatically retain all financial documents for seven years and then delete them. Which Microsoft Purview solution should be used to create the retention policy?

Accepted Answer

Microsoft Purview Data Lifecycle Management. Data Lifecycle Management (formerly Microsoft 365 retention policies) allows organizations to define retention and deletion rules for content. Information Protection focuses on classification and protection. Communication Compliance monitors communications. Audit logs record activities.

Answer

Microsoft Purview Information Protection

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Communication Compliance

Question 15

A company has been fined for failing to respond to a data subject access request (DSAR) within the required timeframe. The compliance team needs to streamline the process of identifying and exporting personal data when a DSAR is received. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview eDiscovery (Premium). Microsoft Purview eDiscovery (Premium) provides advanced search, hold, and export capabilities for responding to DSARs. Data Lifecycle Management handles retention. Communication Compliance monitors communications. Compliance Manager assesses compliance posture but does not handle DSAR workflows.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Lifecycle Management