20+ practice questions focused on Describe the capabilities of Microsoft compliance solutions — one of the most tested topics on the Microsoft Security, Compliance, and Identity Fundamentals SC-900 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Describe the capabilities of Microsoft compliance solutions PracticeA healthcare organization uses Microsoft Purview to protect patient health information (PHI). They need to identify sensitive data stored in Microsoft SharePoint Online and prevent unauthorized sharing. Which two Purview solutions should they implement? (Select all that apply.)
Explanation: Data Classification (A) is correct because it enables the organization to identify and label sensitive data, such as PHI, stored in SharePoint Online. By applying sensitivity labels or retention labels, the organization can classify content based on its sensitivity, which is a prerequisite for applying protective actions. This allows them to discover where PHI resides and prepare it for further controls. Data Loss Prevention (DLP) (B) is correct because it allows the organization to create and enforce policies that prevent sensitive data, once identified and classified, from being shared inappropriately or externally. DLP policies can detect PHI in SharePoint Online and block, warn, or encrypt content based on policy rules, thereby preventing unauthorized sharing.
A law firm uses Microsoft 365 and has two legal teams working on opposing sides of the same lawsuit. The compliance officer needs to prevent any communication (email, Teams chat, file sharing) between the two teams. Additionally, the firm must block emails containing the case name from being sent outside the organization. Which two Microsoft Purview solutions should be configured to meet these requirements? (Choose two.)
Explanation: Microsoft Purview Information Barriers (A) is correct because it is specifically designed to prevent communication and collaboration between two groups within an organization, such as legal teams on opposing sides of a lawsuit. It enforces policies that block email, Teams chat, and file sharing between the defined segments, directly meeting the first requirement. Microsoft Purview Data Loss Prevention (DLP) (B) is correct because it allows organizations to identify, monitor, and protect sensitive information. A DLP policy can be configured to detect specific content (like the case name) in emails and block them from being sent outside the organization, directly addressing the second requirement.
A government agency has extremely sensitive classified data that must be protected even from Microsoft. They require a solution where the encryption keys are stored and managed on-premises within their own hardware security module (HSM), ensuring that Microsoft cannot decrypt their data. Which Microsoft Purview solution should they implement?
Explanation: Microsoft Purview Customer Key is the correct solution because it allows customers to provide and manage their own encryption keys. These keys can be generated in an on-premises hardware security module (HSM) and then securely imported into Azure Key Vault, where they are stored and managed. Azure Key Vault itself is backed by FIPS 140-2 Level 2 validated HSMs. This ensures that Microsoft cannot access the encrypted data, as the keys are under the customer's control, meeting the requirement for protecting classified data even from Microsoft.
A security team is investigating a data exfiltration incident. They need to see detailed events such as when a user accessed a file, the exact action (read, write, delete), and the file name. They also need to perform custom searches across all users. Which Microsoft Purview audit solution should they use to meet these requirements?
Explanation: Audit (Premium) is the correct choice because it provides enhanced audit logging capabilities, including longer retention (1 year vs. 90 days in Standard) which is crucial for in-depth investigations like data exfiltration. It also offers access to higher-value audit events across various services, providing more comprehensive and potentially more granular details for specific actions (e.g., MailItemsAccessed for Exchange mailboxes) that are critical for forensic analysis. While Audit (Standard) provides basic audit logs, Audit (Premium) is specifically designed for advanced forensic and compliance investigations requiring deeper insights and extended historical data.
A financial organization needs to automatically detect documents containing credit card numbers in SharePoint Online and apply a sensitivity label that encrypts the document and restricts editing to internal users. The label must also be automatically assigned when the sensitive content is detected. Which Microsoft Purview solution should they configure?
Explanation: Microsoft Purview Information Protection (sensitivity labels) supports automatic labeling based on sensitive content types (e.g., credit card numbers) using built-in or custom sensitive info types. When configured with auto-labeling policies, the label can be applied automatically in SharePoint Online, enforcing encryption and restricting editing to internal users via rights management.
+15 more Describe the capabilities of Microsoft compliance solutions questions available
Practice all Describe the capabilities of Microsoft compliance solutions questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Describe the capabilities of Microsoft compliance solutions. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Describe the capabilities of Microsoft compliance solutions questions on the SC-900 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Describe the capabilities of Microsoft compliance solutions is tested as part of the Microsoft Security, Compliance, and Identity Fundamentals SC-900 blueprint. Practicing with targeted Describe the capabilities of Microsoft compliance solutions questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free SC-900 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Describe the capabilities of Microsoft compliance solutions is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Describe the capabilities of Microsoft compliance solutions practice session with instant scoring and detailed explanations.
Start Describe the capabilities of Microsoft compliance solutions Practice →