Design security operations, identity, and compliance capabilities →hardMultiple SelectObjective-mapped
Three Key Capabilities of Microsoft Purview for Compliance Management
Which THREE capabilities does Microsoft Purview provide for compliance management?
Quick Answer
The answer is eDiscovery, audit, and information protection with sensitivity labels. These three capabilities form the core of Microsoft Purview compliance management because they address the full lifecycle of data governance: sensitivity labels classify and protect data at rest and in transit, eDiscovery enables legal hold and content search across Microsoft 365 workloads, and audit provides a unified log of user and admin activities for forensic investigation. On the Microsoft Cybersecurity Architect exam, this question tests your ability to distinguish Purview’s compliance tools from its broader data governance or risk management features—a common trap is confusing data lifecycle management or insider risk management as core compliance capabilities when they are separate solutions. Remember the mnemonic “SEA” for Sensitivity labels, eDiscovery, and Audit to recall the three pillars of Purview compliance.
⚠ Common exam trap
Candidates often confuse Microsoft Purview's compliance-focused capabilities (like eDiscovery, audit, and sensitivity labels) with security operations tools (like identity protection and endpoint detection), which belong to separate Microsoft 365 security solutions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Information protection with sensitivity labels
Microsoft Purview provides compliance management capabilities including information protection with sensitivity labels, which allow organizations to classify and protect sensitive data across Microsoft 365 services, endpoints, and third-party apps. Sensitivity labels enforce encryption, visual markings, and access restrictions based on policy, directly supporting data loss prevention and governance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Identity protection and risk detection
Why it's wrong here
Identity Protection is in Entra ID.
- ✓
Information protection with sensitivity labels
Why this is correct
Purview provides sensitivity labels.
- ✓
Data classification and labeling
Why this is correct
Purview includes data classification.
- ✗
Endpoint detection and response
Why it's wrong here
EDR is part of Defender for Endpoint.
- ✓
eDiscovery and audit
Why this is correct
eDiscovery is a Purview solution.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-100 question from scratch — 208 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SC-100
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE of the following are capabilities of Microsoft Purview Information Protection?
hard- A.Preventing data loss via DLP policies
- ✓ B.Classifying data using trainable classifiers
- C.Detecting risky user activities with Insider Risk Management
- ✓ D.Automatically classifying and labeling data based on conditions
- ✓ E.Applying sensitivity labels to documents and emails
Why B: Microsoft Purview Information Protection includes trainable classifiers that use machine learning to intelligently identify sensitive content based on patterns and context, not just keywords. These classifiers can be trained with sample data to improve accuracy, enabling automated classification of documents and emails without requiring manual rule creation.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.