MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
Which THREE are features of Microsoft Purview Information Protection?
⚠ Common exam trap
MS-900 often tests the boundary between Purview workloads — candidates see 'data protection' and include DLP or retention policies, which belong to separate Purview modules, instead of sticking to Information Protection's label/encryption/auto-labeling triad.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Auto-labeling for sensitive data
Auto-labeling for sensitive data (A) is a core Microsoft Purview Information Protection feature that uses trainable classifiers and sensitive information types to automatically apply sensitivity labels to content at rest or in transit. Encryption for emails and documents (B) is provided through sensitivity labels, which can enforce Azure Rights Management (Azure RMS) encryption so that only authorized users can decrypt protected content. Sensitivity labels (E) are the foundational capability of Information Protection, allowing classification and protection settings (encryption, content marking, and restrictions) to travel with the data. Data loss prevention policies (C) belong to Microsoft Purview Data Loss Prevention, a separate workload that detects and blocks risky sharing, and retention policies (D) belong to Microsoft Purview Data Lifecycle Management for retaining or deleting content, so neither is a feature of Information Protection itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Auto-labeling for sensitive data
Why this is correct
Auto-labelling applies sensitivity labels automatically by detecting sensitive information types or trainable classifiers, without manual user action. This satisfies the stem's feature requirement by scaling classification across Microsoft 365 workloads, applying protection consistently to content as it is created or modified.
- ✓
Encryption for emails and documents
Why this is correct
Encryption wraps emails and documents with Azure Rights Management, so protection travels with the file regardless of location. This satisfies the stem's feature requirement because only authorised identities can decrypt, enforced through Microsoft Entra ID authentication, even after content leaves the organisation's boundary.
- ✗
Data loss prevention policies
Why it's wrong here
Data loss prevention policies are a separate Microsoft Purview solution that detects and blocks sensitive content in motion; Information Protection centres on sensitivity labels, encryption and classification. It is tempting because both use sensitive information types, but DLP enforcement is its own workload, not an Information Protection feature.
- ✗
Retention policies
Why it's wrong here
Retention policies belong to Microsoft Purview Data Lifecycle Management, not Information Protection, which classifies and encrypts content. It is tempting because both sit within Microsoft Purview and govern data, but retention controls how long items are kept rather than how sensitivity labels protect them.
- ✓
Sensitivity labels
Why this is correct
Sensitivity labels apply persistent encryption and usage restrictions that travel with the file itself, classifying content by business impact. This satisfies the question's requirement for a Microsoft Purview Information Protection feature, since labelling is the core mechanism for discovering, classifying and protecting data across workloads.
Go deeper
Related to this question
About these practice questions
One of 794 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.