Design solutions that align with security best practices and priorities →mediumMultiple SelectObjective-mapped
Using Microsoft Purview Data Map, Data Catalog, and Data Estate Insights for Sensitive Data Discovery
A company is designing a data security strategy using Microsoft Purview. They need to identify sensitive data across their data estate, including on-premises SQL Server, Azure SQL Database, and Amazon S3. Which THREE components should they use? (Choose three.)
Quick Answer
The answer is Microsoft Purview Data Map, Data Catalog, and Data Estate Insights. These three components work together to identify sensitive data across a hybrid data estate, including on-premises SQL Server, Azure SQL Database, and Amazon S3. The Data Map provides the underlying scanning and classification engine that discovers and catalogs sensitive data types across all sources, while the Data Catalog organizes these assets into a searchable inventory with business context. Data Estate Insights then aggregates scan results into dashboards that reveal where sensitive data resides and highlights security posture risks, enabling targeted classification and protection actions. On the Microsoft Cybersecurity Architect exam, this question tests your understanding of how Purview’s core components collaborate for cross-platform sensitive data discovery, not just Azure-native sources. A common trap is to select only Azure Purview or Azure Policy, but the correct trio must include the scanning foundation (Data Map), the organizational layer (Data Catalog), and the visibility layer (Data Estate Insights). Memory tip: Map, Catalog, Insights—scan, organize, visualize.
⚠ Common exam trap
A common mix-up: candidates confuse Compliance Manager (a compliance posture tool) with data discovery capabilities, or think External Identities (an identity feature) is relevant to scanning data sources, when in fact only Data Map, Data Catalog, and Data Estate Insights form the core trio for sensitive data identification across hybrid estates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Data Estate Insights
Microsoft Purview Data Estate Insights provides visibility into data estate health and security posture, including sensitive data discovery across on-premises SQL Server, Azure SQL Database, and Amazon S3. It aggregates scan results and offers dashboards to identify where sensitive data resides, enabling targeted classification and protection actions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Purview Data Estate Insights
Why this is correct
Data Estate Insights provides monitoring and reporting.
- ✗
Microsoft Purview External Identities
Why it's wrong here
External Identities is for B2B collaboration, not data classification.
- ✓
Microsoft Purview Data Catalog
Why this is correct
Data Catalog stores metadata and allows discovery.
- ✗
Microsoft Purview Compliance Manager
Why it's wrong here
Compliance Manager helps manage compliance activities, not data scanning.
- ✓
Microsoft Purview Data Map
Why this is correct
Data Map scans and classifies data sources.
Visual reference
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-100 question from scratch — 208 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SC-100
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company uses Microsoft Purview to manage data governance. They need to classify sensitive data automatically in Azure SQL Database. What should they configure?
medium- A.Microsoft Defender for Cloud regulatory compliance
- ✓ B.Microsoft Purview Data Map scanning rules
- C.Microsoft Sentinel data connectors
- D.Microsoft Entra ID Protection
Why B: Microsoft Purview Data Map scanning rules are the correct choice because they enable automated classification of sensitive data in Azure SQL Database by scanning the database schema and content against built-in or custom sensitive data types. This is the native mechanism within Purview to discover and label sensitive columns, such as credit card numbers or PII, directly in Azure SQL Database.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.