Describe security, compliance, privacy, and trust in Microsoft 365 →hardMultiple ChoiceObjective-mapped
MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
An organization needs to prevent users from sharing documents that contain credit card numbers via email and Microsoft Teams. When a user attempts to share such a document, they should see a policy tip explaining the restriction. Which Microsoft Purview solution should the compliance team configure?
⚠ Common exam trap
Watch out — candidates often confuse Sensitivity Labels (which classify data) with DLP (which enforces actions based on that classification or on sensitive data patterns), leading them to choose D when the question specifically asks for a solution that scans for credit card numbers and shows policy tips.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Data Loss Prevention (DLP)
Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect sensitive information types—such as credit card numbers—in documents and communications. DLP policies can be configured to block or warn users via policy tips when they attempt to share such content through email or Microsoft Teams, enforcing compliance without disrupting legitimate work.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Purview Information Barriers
Why it's wrong here
Information barriers are a Microsoft Purview solution that restricts communication and collaboration between specific user segments to avoid conflicts of interest, such as trading or legal teams. They operate by blocking contact, chat, and file sharing between those defined groups, not by inspecting the content of files. They do not scan for sensitive data like credit card numbers, nor do they present policy tips when a user tries to share such a document. Therefore, they cannot prevent the sharing of documents containing credit card information.
- ✓
Microsoft Purview Data Loss Prevention (DLP)
Why this is correct
Microsoft Purview Data Loss Prevention (DLP) is designed to identify, monitor, and protect sensitive data through content analysis based on sensitive information types, including credit card numbers. DLP policies can be applied to Exchange, SharePoint, OneDrive, Teams, and endpoints, and they evaluate actions like external sharing or downloads. When a user attempts to share a document containing a credit card number, the policy can block the sharing action and display a policy tip that informs the user about the violation. This matches the requirement precisely.
- ✗
Microsoft Purview Retention Policies
Why it's wrong here
Microsoft Purview Retention Policies govern the lifecycle of content, specifying how long items must be retained and when they should be permanently deleted, based on regulatory and organizational requirements. They do not evaluate or access the content of files for sensitive information and cannot block a sharing action in real time. Retention policies lack policy tips or user notifications because their purpose is litigation and compliance disposal, not preventing unauthorized distribution. Hence, they are not the correct tool for blocking documents containing credit card data.
- ✗
Microsoft Purview Sensitivity Labels
Why it's wrong here
Sensitivity labels in Microsoft Purview classify content and can apply protection such as encryption, watermarks, or header/footer markings, but they are not designed to intercept and block a sharing action as it happens. Labels are assigned manually by users or through automatic classification, yet the label itself does not present a policy tip when a user attempts to share a document, nor does it scan for credit card numbers unless paired with DLP rules. While labels can serve as a condition in a DLP policy, the label alone cannot prevent the sharing of documents containing sensitive data. Thus, DLP is the solution that actively blocks sharing.
Go deeper
Related to this question
Learn chapter
Cloud Service Types for MS-900
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Microsoft Teams
Microsoft Teams is a collaboration platform that integrates chat, video meetings, file storage, and application integration into a single workspace, primarily used within the Microsoft 365 ecosystem.
About these practice questions
This MS-900 question is part of Courseiva's 217-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.