MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
Which THREE capabilities are provided by Microsoft Purview Information Protection? (Choose three.)
⚠ Common exam trap
The trap is confusing Information Protection with other Purview solutions like DLP or Data Lifecycle Management; candidates may select capabilities that belong to those other solutions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Auto-classify content based on sensitive data types
Microsoft Purview Information Protection provides auto-classification of content by detecting sensitive data types (e.g., credit card or national ID patterns) through trainable classifiers and sensitive information types, which justifies option A. It also lets organizations apply sensitivity labels to documents and emails across Microsoft 365 apps, making option B correct. Those same sensitivity labels can enforce encryption and access restrictions (e.g., via Azure Rights Management), so option C is correct. Option D is not a core Information Protection capability; blocking email sharing of sensitive data is handled by Data Loss Prevention (DLP) policies, a related but distinct workload. Option E is also incorrect here because retention policies for mailboxes belong to Microsoft Purview Data Lifecycle Management, not Information Protection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Auto-classify content based on sensitive data types
Why this is correct
Auto-classification scans content for sensitive data types, such as credit card or national insurance numbers, and applies labels without manual intervention. This directly satisfies the stem's requirement for a Microsoft Purview Information Protection capability, since automated, policy-driven labelling of sensitive content is a core function of that service.
- ✓
Apply sensitivity labels to documents and emails
Why this is correct
Sensitivity labels classify and protect documents and emails by embedding encryption, content markings and access restrictions directly into the file, satisfying the requirement to safeguard data at rest and in transit. Microsoft Purview Information Protection applies these labels manually or automatically, enforcing protection that persists wherever the content travels.
- ✓
Encrypt documents and control access using labels
Why this is correct
Sensitivity labels apply persistent encryption directly to documents, so protection travels with the file even after it leaves your tenant. This satisfies the stem's requirement for information protection capabilities, since access restrictions are enforced by the label itself rather than by perimeter controls, and Microsoft Entra ID identities govern who can decrypt.
- ✗
Block sharing of sensitive data via email
Why it's wrong here
Blocking sensitive-data email sharing is enforced by Data Loss Prevention policies, a separate Purview workload, not Information Protection's labelling and encryption. It is tempting because labels feed DLP conditions, so the two appear coupled; DLP would be the correct choice when the requirement is preventing exfiltration of identified sensitive content.
- ✗
Define retention policies for mailboxes
Why it's wrong here
Retention policies for mailboxes belong to Microsoft Purview Data Lifecycle Management, not Information Protection, which classifies and labels content. It is tempting because both Purview workloads share the same portal and licensing, so retention appears alongside sensitivity labels; retention would be correct when the requirement is keeping or deleting content for compliance periods.
Go deeper
Related to this question
Learn chapter
Microsoft To Do and Task Management
Key term
Data Loss Prevention
Data Loss Prevention (DLP) is a set of tools and processes that help organizations stop sensitive information from being shared, leaked, or stolen, whether accidentally or on purpose.
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
About these practice questions
One of 794 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.