SC-200 Manage a security operations environment Practice Question
Your organization uses Microsoft Purview Compliance Manager to manage compliance activities. You need to assign a specific improvement action to a colleague for implementation. What should you do?
⚠ Common exam trap
Microsoft often tests the distinction between assigning a specific improvement action versus modifying assessment ownership or using alert policies, so candidates mistakenly choose options that involve broader permissions or unrelated notification mechanisms instead of the direct assignment feature.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
In the 'Improvement actions' tab, select the action and click 'Assign'
In Microsoft Purview Compliance Manager, improvement actions are the specific tasks that need to be completed to meet compliance controls. Each improvement action can be directly assigned to a colleague by selecting the action in the 'Improvement actions' tab and clicking the 'Assign' button, which allows you to specify the assignee and due date. This is the intended workflow for delegating implementation responsibilities within Compliance Manager.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
In the 'Improvement actions' tab, select the action and click 'Assign'
Why this is correct
In Compliance Manager, an improvement action is the individual task that maps to a specific control or family of controls. Selecting the action and clicking 'Assign' lets you directly designate a user as the responsible party, which is the only built-in way to delegate accountability for that action. Once assigned, the action appears in the colleague's 'My improvement actions' list so they can track, update, and submit evidence for it.
- ✗
Create a new alert policy to notify the colleague
Why it's wrong here
Alert policies in Microsoft Purview are event-driven notification rules, such as triggers for unusual file access or data loss prevention matches. They are designed to monitor and alert, not to create or assign improvement actions, so using one to 'notify' a colleague would only send a message if a condition occurs. No alert policy has the capability to bind a user to an improvement action's responsibility, making this option functionally incorrect for delegating the task.
- ✗
Modify the assessment to include the colleague as an owner
Why it's wrong here
Adding a colleague as an owner to an assessment changes who can manage the assessment's overall score, lifecycle, and settings. This action is at the assessment scope, and it does not automatically assign any of the individual improvement actions within that assessment to that person. Assessment ownership is a broader administrative role, whereas improvement action assignment is a granular, per-task responsibility, so this option conflates two distinct privilege and task-management models.
- ✗
Use the 'Assessments' tab to delegate tasks
Why it's wrong here
The 'Assessments' tab is the main dashboard for viewing compliance assessments, their score progress, and their connected controls. It does not expose any assignment or delegation functionality for individual improvement actions; that capability lives exclusively in the details pane of each improvement action. Therefore, looking to the Assessments tab to delegate tasks would be a mismatch, as there is no such control in that interface.
Go deeper
Related to this question
About these practice questions
One of 1,303 original SC-200 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-200 exam.