SC-900 Describe the capabilities of Microsoft compliance solutions Practice Test 9 — 15 Questions

Question 1

A company is involved in a legal case and must preserve all emails and documents sent by a specific employee (custodian) that are related to a particular matter. The legal team needs to collect this data into a tamper-proof container for review, ensuring that no original items are modified or deleted. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Premium). eDiscovery (Premium) is the correct solution because it provides advanced capabilities for legal investigations, including the ability to place a legal hold on specific custodians (the employee) and preserve all relevant emails and documents in a tamper-proof container. This ensures that no original items are modified or deleted during the review process, meeting the requirements of the legal case.

Answer

Retention labels

Answer

eDiscovery (Standard)

Answer

Data Lifecycle Management

Question 2

An organization uses Microsoft 365. They need to prevent users from sharing credit card numbers in emails and Microsoft Teams messages. When a user attempts to share such sensitive information externally, the message should be blocked and the user should receive a policy tip notification. Which Microsoft Purview solution should they configure?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect and protect sensitive information, such as credit card numbers, through deep content analysis using built-in sensitive information types. DLP policies can be configured to block the sharing of this data in emails and Microsoft Teams messages and to display a policy tip notification to the user, enforcing compliance in real time.

Answer

Data Lifecycle Management

Answer

Insider Risk Management

Answer

Information Protection

Question 3

A company must retain all financial records for exactly 7 years and then automatically delete them. They need to automatically apply a retention label to any document that contains the words 'Invoice' or 'Statement'. Which Microsoft Purview solution should they use?

Accepted Answer

Data Lifecycle Management (retention labels with auto-apply). Data Lifecycle Management (DLM) with auto-apply retention labels is the correct solution because it allows you to define a retention label that automatically applies to documents containing the keywords 'Invoice' or 'Statement' using a sensitive info type or trainable classifier. You can then configure the label to retain the data for exactly 7 years and trigger automatic deletion at the end of that period. This directly meets the requirement for both automated classification and lifecycle enforcement.

Answer

Data Loss Prevention (DLP)

Answer

eDiscovery (Standard)

Answer

Audit

Question 4

Arrange the steps to conduct a data classification scan using Microsoft Purview Information Protection.

Question 5

Order the steps to deploy Microsoft Intune for mobile device management.

Question 6

Match each security control type to its example.

Question 7

Match each compliance framework to its primary focus.

Question 8

Your organization uses Microsoft Purview to enforce data loss prevention (DLP) policies. You need to ensure that when a user attempts to share a document containing credit card numbers via email, the document is blocked and the user receives a policy tip. What should you configure in the DLP policy?

Accepted Answer

Set the action to 'Block with override'. Option B is correct because 'Block with override' allows the block action with a policy tip, enabling the user to override if necessary. Option A is wrong because 'Block' only blocks without a policy tip. Option C is wrong because 'Audit only' only logs the activity. Option D is wrong because 'Notify only' sends a notification without blocking.

Answer

Set the action to 'Audit only'

Answer

Set the action to 'Block'

Answer

Set the action to 'Notify only'

Question 9

Your company uses Microsoft Purview Communication Compliance to detect and remediate inappropriate messages. You need to create a policy that monitors Microsoft Teams chats for potential harassment. Which type of policy should you create?

Accepted Answer

Communication Compliance policy. Option D is correct because Communication Compliance policies can monitor Teams chats for offensive language. Option A is wrong because Information Barriers restrict communication between groups. Option B is wrong because DLP policies protect sensitive data. Option C is wrong because Retention policies manage data lifecycle.

Answer

Data Loss Prevention (DLP) policy

Answer

Information Barriers policy

Answer

Retention policy

Question 10

Your organization is implementing Microsoft Purview to manage data governance. You need to classify sensitive data such as social security numbers automatically. What should you create?

Accepted Answer

Sensitive information type. Option A is correct because sensitive information types (SITs) detect patterns like SSNs. Option B is wrong because retention labels manage retention. Option C is wrong because DLP policies use SITs but are not the classification mechanism. Option D is wrong because trainable classifiers require training data.

Answer

Data loss prevention policy

Answer

Retention label

Answer

Trainable classifier

Question 11

Your organization uses Microsoft Purview Data Lifecycle Management to retain data for regulatory compliance. You need to ensure that all documents in a SharePoint site are retained for 7 years after they are last modified. What should you create?

Accepted Answer

An adaptive scope based on last modified date. Option B is correct because adaptive scopes allow dynamic targeting based on metadata. Option A is wrong because static scopes target specific sites. Option C is wrong because auto-labeling policies apply labels automatically. Option D is wrong because DLP policies protect data.

Answer

An auto-labeling policy

Answer

A data loss prevention policy

Answer

A static scope for the SharePoint site

Question 12

Your organization uses Microsoft Purview eDiscovery to manage legal holds. You need to place a hold on mailboxes and OneDrive accounts for a specific user who is involved in a litigation. Which eDiscovery solution should you use?

Accepted Answer

eDiscovery (Standard). Option C is correct because eDiscovery (Standard) supports core hold functionality. Option A is wrong because Content search is for search only, not hold. Option B is wrong because Audit is for logging. Option D is wrong because Communication Compliance is for monitoring communications.

Answer

Audit

Answer

Communication Compliance

Answer

Content search

Question 13

Your organization wants to classify documents based on whether they contain confidential business information like trade secrets. You need to use a classifier that learns from example documents. What should you use?

Accepted Answer

Trainable classifier. Option D is correct because trainable classifiers use machine learning based on seed documents. Option A is wrong because SITs use predefined patterns. Option B is wrong because exact data match requires exact values. Option C is wrong because DLP policies are actions, not classifiers.

Answer

Exact data match

Answer

Data loss prevention policy

Answer

Sensitive information type

Question 14

Your organization uses Microsoft Purview Records Management to manage high-value records that must not be deleted. You need to apply a label that marks content as a regulatory record. What label type should you use?

Accepted Answer

Retention label configured for regulatory records. Option A is correct because regulatory records are a specific disposition type. Option B is wrong because retention labels can have different actions. Option C is wrong because sensitivity labels classify but don't manage records. Option D is wrong because DLP is not for records.

Answer

Data loss prevention policy

Answer

Retention label configured for record

Answer

Sensitivity label

Question 15

Your organization needs to ensure that emails containing personally identifiable information (PII) like passport numbers are automatically encrypted before being sent externally. What should you configure in Microsoft Purview?

Accepted Answer

A DLP policy with the 'Encrypt' action. Option B is correct because a DLP policy can automatically encrypt emails with sensitive data. Option A is wrong because retention labels manage retention. Option C is wrong because communication compliance policies monitor content. Option D is wrong because information barriers restrict communication.

Answer

A retention label that encrypts the email

Answer

A communication compliance policy

Answer

An information barrier policy