SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 21 — 15 Questions

Question 1

Refer to the exhibit. A Microsoft Purview DLP policy is configured as shown. What will happen when a user tries to email an external recipient a document containing a credit card number?

Accepted Answer

The email will be blocked and the user will receive a notification. The DLP policy is configured with the action 'Block' and the user notification is enabled. When a user attempts to email a document containing a credit card number to an external recipient, the policy blocks the email from being sent and displays a notification to the user explaining the policy violation. This is the default behavior for a 'Block' action with user notification in Microsoft Purview DLP.

Answer

The email will be sent but the attachment will be removed

Answer

The email will be delivered and the admin will be alerted

Answer

The email will be sent and the event will be logged for audit

Question 2

A company wants to automatically classify and protect sensitive documents stored in SharePoint Online. The compliance administrator needs to create a policy that detects credit card numbers and applies encryption. Which Microsoft Purview solution should the administrator use?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling (Option B) is the correct Microsoft Purview solution because it allows the compliance administrator to create a policy that automatically detects sensitive data types, such as credit card numbers, and applies encryption to documents in SharePoint Online. This feature uses trainable classifiers or sensitive information types to scan content at rest and automatically assign a label that enforces protection actions like encryption, meeting the requirement without manual user intervention.

Answer

Communication Compliance

Answer

Microsoft Entra ID

Answer

Data Lifecycle Management

Question 3

A compliance officer needs to monitor internal emails for inappropriate language and potential data leaks. The officer wants to detect policy violations and allow users to report concerns. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Communication Compliance. Microsoft Purview Communication Compliance is the correct solution because it is specifically designed to detect policy violations in internal and external communications, including inappropriate language and potential data leaks. It also provides a built-in mechanism for users to report concerns, aligning directly with the compliance officer's requirements.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Information Protection

Question 4

A multinational organization must comply with GDPR and local data residency requirements. The compliance team needs to ensure that personal data is not stored in regions outside the permitted locations. Which Microsoft Purview capability should they use to discover and map personal data across the organization's data estate?

Accepted Answer

Microsoft Purview Data Map. Microsoft Purview Data Map is the correct capability because it provides automated data discovery, classification, and lineage across hybrid and multi-cloud data estates. It enables organizations to scan, map, and catalog personal data, including GDPR-sensitive attributes, and enforce data residency policies by identifying where data is stored. This directly supports the compliance team's need to discover and map personal data across permitted locations.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Audit

Question 5

An organization wants to automatically retain all financial documents for seven years and then delete them. Which Microsoft Purview solution should be used to create the retention policy?

Accepted Answer

Microsoft Purview Data Lifecycle Management. Microsoft Purview Data Lifecycle Management (formerly Microsoft 365 Retention) is the correct solution because it provides retention and deletion policies that can automatically retain data for a specified period (e.g., seven years) and then permanently delete it. This solution is designed specifically for managing the lifecycle of content across Exchange, SharePoint, OneDrive, and Teams, making it ideal for regulatory compliance requirements like financial document retention.

Answer

Microsoft Purview Information Protection

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Communication Compliance

Question 6

A company has been fined for failing to respond to a data subject access request (DSAR) within the required timeframe. The compliance team needs to streamline the process of identifying and exporting personal data when a DSAR is received. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview eDiscovery (Premium). Microsoft Purview eDiscovery (Premium) provides advanced search, hold, and export capabilities for responding to DSARs. Data Lifecycle Management handles retention. Communication Compliance monitors communications. Compliance Manager assesses compliance posture but does not handle DSAR workflows.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Lifecycle Management

Question 7

An organization must prove to an auditor that only authorized users have accessed sensitive HR files over the past year. The compliance team needs to generate a report of all access events to these files. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Audit (Premium). Microsoft Purview Audit (Premium) is the correct solution because it provides detailed logging of all access events to sensitive files, including who accessed them, when, and from where. The compliance team can generate a comprehensive report of these events over the past year, meeting the auditor's requirement to prove only authorized users accessed the HR files. Audit (Premium) offers extended retention (up to 10 years) and advanced search capabilities, making it ideal for forensic investigations and compliance audits.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Information Protection

Question 8

A company wants to prevent employees from accidentally sharing a document containing personally identifiable information (PII) with external users. The document is stored in OneDrive for Business. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect and prevent the accidental sharing of sensitive data, such as PII, with external users. DLP policies can be configured to scan documents in OneDrive for Business for PII patterns (e.g., Social Security numbers, credit card numbers) and automatically block sharing with external users or trigger a policy tip to warn the employee. This directly addresses the requirement to prevent accidental external sharing of PII.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Information Protection

Answer

Microsoft Purview Audit

Question 9

A compliance officer needs to create a policy that automatically detects and blocks the sharing of credit card numbers in emails and Teams messages. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect and automatically block sensitive information, such as credit card numbers, from being shared in emails and Teams messages. DLP uses built-in sensitive information types (e.g., Credit Card Number) and policies that can enforce actions like blocking the message or sending an alert, directly meeting the compliance officer's requirement.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Information Protection

Question 10

An organization needs to automatically apply a 'Highly Confidential' sensitivity label to all documents that contain a specific custom sensitive information type. The label should be applied when the document is created or modified. Which feature of Microsoft Purview Information Protection should be used?

Accepted Answer

Auto-labeling policies. Auto-labeling policies in Microsoft Purview Information Protection are designed to automatically apply sensitivity labels to documents and emails based on conditions such as the presence of sensitive information types. This feature supports both simulation and real-time enforcement, and it can be triggered when documents are created or modified, meeting the organization's requirement exactly.

Answer

Manual sensitivity labeling

Answer

Data Loss Prevention (DLP) policies

Answer

Communication Compliance policies

Question 11

Which TWO actions can be performed using Microsoft Purview Data Lifecycle Management?

Accepted Answer

Create a retention policy to keep financial records for 7 years. Microsoft Purview Data Lifecycle Management allows administrators to create retention policies that specify how long data must be kept to meet regulatory or business requirements, such as retaining financial records for 7 years. Option C is correct because the same solution enables deletion policies that automatically remove outdated content, like drafts older than 30 days, ensuring data is not kept longer than necessary.

Answer

Monitor internal emails for policy violations

Answer

Block sharing of sensitive files with external users

Answer

Automatically classify documents containing PII

Question 12

Which THREE capabilities are provided by Microsoft Purview Compliance Manager?

Accepted Answer

Pre-built compliance assessments for regulations like GDPR. Compliance Manager provides assessments, actions, and score tracking. It does not discover data (Data Map) or log access (Audit).

Answer

Audit log search for user access events

Answer

Automated data discovery across cloud sources

Question 13

Which TWO features are part of Microsoft Purview Information Protection?

Accepted Answer

Automatic classification based on sensitive content. Microsoft Purview Information Protection (MIP) focuses on classifying, labeling, and protecting sensitive data. Automatic classification based on sensitive content (Option C) is a core capability of MIP, using built-in or custom sensitive information types to detect and label data automatically. Sensitivity labels (Option D) are the primary mechanism in MIP to apply protection actions such as encryption, access restrictions, and visual markings to documents and emails.

Answer

Communication monitoring

Answer

Retention policies

Answer

Audit log investigation

Question 14

A compliance administrator creates the DLP policy shown in the exhibit. When a user shares a document containing a credit card number with an external partner, what is the expected outcome?

Accepted Answer

The document is blocked from being shared externally, and the user receives a notification.. The DLP policy is configured with an action to block external sharing and notify the user when a credit card number is detected. When the user shares the document externally, the policy triggers this action, preventing the share and sending a notification to the user. This matches option A exactly.

Answer

The document is automatically deleted.

Answer

A sensitivity label is automatically applied.

Answer

The document is blocked from being shared both internally and externally.

Question 15

A company deploys a sensitivity label as shown in the exhibit. The custom sensitive information type 'Custom_PII_Type' is configured to detect employee IDs. What happens when a user creates a new document in SharePoint Online that contains an employee ID?

Accepted Answer

The document is automatically labeled 'Highly Confidential' and encrypted.. The sensitivity label is configured for auto-labeling with a condition that detects the custom sensitive information type 'Custom_PII_Type'. When a user creates a document in SharePoint Online containing an employee ID, Microsoft 365 automatically applies the 'Highly Confidential' label and enforces encryption as defined in the label policy, without requiring manual user action.

Answer

The user is prompted to manually apply the label.

Answer

The document is blocked from being shared externally.

Answer

The document is deleted automatically.