DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing
Your organization uses Microsoft Purview to catalog data assets. You need to ensure that sensitive data such as credit card numbers are automatically detected and labeled. Which Purview feature should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a scan rule set with built-in classification rules for sensitive data types.
Microsoft Purview can automatically detect sensitive data like credit card numbers by configuring a scan rule set that includes built-in classification rules. Option A is incorrect because Azure Policy enforces compliance rules but does not perform data scanning or classification. Option C is incorrect because Data Catalog self-service search is for discovering and searching data assets, not for automatic sensitive data detection. Option D is incorrect because Microsoft Information Protection is primarily for labeling and protection in Microsoft 365, not for scanning data in Purview.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create an Azure Policy to enforce tagging.
Why it's wrong here
Policy does not automatically detect sensitive data.
- ✓
Configure a scan rule set with built-in classification rules for sensitive data types.
Why this is correct
Scan rule sets enable automatic detection of sensitive data.
- ✗
Enable the Data Catalog self-service search.
Why it's wrong here
Search does not detect sensitive data.
- ✗
Enable Microsoft Information Protection for the data sources.
Why it's wrong here
MIP is for Office 365, not Purview scanning.
Go deeper
Related to this question
About these practice questions
One of 760 original DP-203 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on DP-203
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. You are using Azure Purview to scan an Azure Data Lake Storage Gen2 account. After scanning, you notice that some files are not classified. What is the most likely reason?
medium- A.The storage account is not registered in Purview
- B.The files are in Parquet format
- C.The classification rules are disabled
- ✓ D.The file types are not included in the scan rule set
Why D: Purview uses scan rule sets to determine which file types to scan and apply classifications. If the file type is not included in the scan rule set, those files will be skipped during scanning, leading to no classification. Option A is incorrect because if the storage account were not registered, no files would be scanned at all. Option B is incorrect because Parquet files are supported and can be classified. Option C is incorrect because if classification rules were disabled, no files would be classified, not just some.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.