Design security operations, identity, and compliance capabilities →mediumMultiple SelectObjective-mapped
SC-100 Practice Question: Design security operations, identity, and compliance capabilities
Your organization uses Microsoft Purview to classify sensitive data. You need to automatically apply a sensitivity label to documents that contain personally identifiable information (PII). Which TWO components should you configure?
⚠ Common exam trap
Many candidates confuse DLP policies (which detect and block data exfiltration) with auto-labeling policies (which apply classification labels), leading them to incorrectly select DLP policy as a component for automatic labeling.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Auto-labeling policy
Auto-labeling policy (A) is correct because it automatically applies sensitivity labels to documents based on conditions such as the presence of sensitive data types (e.g., PII). Sensitivity label (D) is correct because it defines the classification and protection settings (e.g., encryption, markings) that are applied to the content. Together, they enable automatic classification of PII documents without manual user intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Auto-labeling policy
Why this is correct
An auto-labeling policy in Microsoft Purview applies sensitivity labels automatically based on conditions such as the presence of sensitive information types, including PII. This satisfies the stem’s requirement for automatic application without user intervention, using machine learning or exact data match classifiers to detect PII patterns within documents.
- ✗
Retention label
Why it's wrong here
Retention labels manage data lifecycle, not sensitivity classification.
- ✗
Data Loss Prevention (DLP) policy
Why it's wrong here
DLP policies enforce actions on sensitive data but do not automatically apply labels.
- ✓
Sensitivity label
Why this is correct
Sensitivity labels define the classification and protection to be applied.
- ✗
Trainable classifier
Why it's wrong here
Trainable classifiers are used for custom classification but are not required for built-in PII detection.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-100 question from scratch — 208 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.