Design security operations, identity, and compliance capabilities →mediumMultiple ChoiceObjective-mapped
Automatically Applying Retention Labels to Documents with Credit Card Numbers
A company uses Microsoft Purview to classify data and enforce retention policies. They need to automatically apply a retention label to all documents containing credit card numbers. Which approach should they use?
Quick Answer
The answer is to configure an auto-labeling policy with a sensitive info type. This is correct because Microsoft Purview auto-labeling policies use pattern matching against built-in sensitive info types (SITs), such as the credit card number SIT, to automatically apply retention labels to documents without user intervention. On the Microsoft Cybersecurity Architect exam, this scenario tests your understanding of how Purview’s auto-labeling differs from manual or default labeling—a common trap is confusing it with a retention policy that lacks a label, or assuming you need a trainable classifier for a fixed pattern like credit card numbers. Remember, SITs handle structured data like credit card numbers via regex patterns, while trainable classifiers are for unstructured content. A quick memory tip: for fixed patterns, think “SIT and auto-label,” not manual or machine learning.
⚠ Common exam trap
It's easy for candidates to confuse trainable classifiers with sensitive info types, thinking that 'intelligent' classification is always better, but SITs are the correct choice for specific, pattern-based data like credit card numbers.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure an auto-labeling policy with a sensitive info type
Microsoft Purview auto-labeling policies can automatically apply retention labels to documents based on sensitive info types (SITs), such as credit card numbers. This approach uses pattern matching to detect the credit card number format and applies the label without user intervention, meeting the requirement for automatic enforcement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure an auto-labeling policy with a sensitive info type
Why this is correct
Auto-labeling applies labels based on content.
- ✗
Use a trainable classifier
Why it's wrong here
Overkill for credit card numbers.
- ✗
Create a manual labeling policy for users
Why it's wrong here
Not automated.
- ✗
Use a default label for SharePoint libraries
Why it's wrong here
Not content-based.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-100 question from scratch — 208 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SC-100
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company uses Microsoft Purview to classify and label sensitive data. They want to automatically apply a sensitivity label to documents containing a specific custom sensitive information type. Which TWO components are required for this?
medium- A.Data loss prevention (DLP) policy
- B.Retention label
- ✓ C.Custom sensitive information type
- ✓ D.Auto-labeling policy
- E.Trainable classifier
Why C: A custom sensitive information type defines the specific data pattern (e.g., a proprietary employee ID format) that Microsoft Purview can detect in documents. Option D is correct because an auto-labeling policy uses that custom sensitive information type as a condition to automatically apply a sensitivity label to matching content, without requiring user intervention.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.