SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Sensitivity labels with auto-classification

  Why this is correct

  Sensitivity labels with auto-classification are the correct solution because they leverage content inspection rules, regular expressions, or trainable classifiers to automatically identify sensitive information within documents. Once identified, these labels can apply persistent protective actions such as encryption, visual markings (headers/footers/watermarks), and access restrictions, ensuring data is classified and secured at rest and in transit. This directly fulfills the requirement to automatically classify and protect documents containing sensitive data.

• ✗

  eDiscovery

  Why it's wrong here

  eDiscovery tools within Microsoft Purview are primarily designed for legal and compliance investigations, enabling organizations to search for, preserve, and export electronic data across various Microsoft 365 services. While it can locate documents containing specific content, its function is reactive data retrieval and management for litigation or regulatory requests, not proactive, automated content classification or the application of protective measures like encryption to documents at rest.

• ✗

  Microsoft Purview Audit

  Why it's wrong here

  Microsoft Purview Audit provides a comprehensive record of user and administrator activities across Microsoft 365 services, capturing events like file access, mailbox operations, and policy changes. Its core purpose is to facilitate forensic investigations, compliance monitoring, and security analysis by providing an immutable log of actions, rather than automatically classifying document content or applying encryption for data protection.

• ✗

  Data Loss Prevention (DLP) policies

  Why it's wrong here

  Data Loss Prevention (DLP) policies are designed to identify, monitor, and protect sensitive information from being inappropriately shared, either internally or externally, across various locations and applications. While DLP can detect sensitive content, its primary function is to prevent data exfiltration or misuse through actions like blocking, warning, or notifying, rather than automatically applying persistent classification labels and encryption directly to documents at rest for proactive data protection.

Go deeper

Related to this question