MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
A healthcare organization must encrypt outbound email automatically when a message contains passport numbers. Which two Microsoft Purview capabilities are commonly combined? (Choose two.)
⚠ Common exam trap
Many candidates confuse Microsoft Purview Message Encryption as a standalone solution, forgetting that it requires a DLP policy to automatically detect and trigger the encryption action.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP)
Data Loss Prevention (DLP) is the correct answer because it provides the policy engine that detects sensitive information, such as passport numbers, in outbound email. When a DLP rule matches, it can trigger automatic encryption of the message using Microsoft Purview Message Encryption, ensuring the email is protected before leaving the organization.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Planner
Why it's wrong here
Microsoft Planner is a project management and task collaboration tool that helps teams organize work using boards, buckets, and assignments. It operates at the application layer and does not participate in the Exchange Online mail flow, so it cannot inspect outbound messages for sensitive data or apply encryption. Therefore, choosing Planner would not satisfy the requirement to encrypt outbound emails containing passport numbers.
- ✓
Data Loss Prevention (DLP)
Why this is correct
Data Loss Prevention (DLP) is the foundational capability for identifying sensitive information, such as passport numbers, within outbound email. DLP policies are precisely configured to automatically detect these specific content types using built-in or custom sensitive information types. Upon detection, a pre-defined action, such as applying encryption to the email, is automatically triggered. This directly satisfies the requirement to encrypt outbound email when a message contains passport numbers.
- ✓
Microsoft Purview Message Encryption
Why this is correct
Microsoft Purview Message Encryption (MPME) is the correct solution because it uses Azure Rights Management (RMS) to encrypt outgoing messages, making them unreadable without proper authentication, even for external recipients. When a DLP policy detects a sensitive information type such as a passport number, it can automatically enforce encryption as the remediation action before the message leaves the mailbox. This protects email to both internal and external recipients and directly meets the healthcare organization's stated requirement.
- ✗
Microsoft Viva Engage
Why it's wrong here
Microsoft Viva Engage is an enterprise social networking platform, formerly known as Yammer, that focuses on communities, conversations, and employee engagement. While it may send notification emails, it is a separate service that does not integrate with the Exchange Online transport pipeline and has no native capability to inspect or encrypt outbound messages. Because Viva Engage offers no email security or encryption controls, it cannot address the outbound email encryption requirement.
Go deeper
Related to this question
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.