SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A company wants to automatically detect and remediate inappropriate messages in Microsoft Teams. Which Microsoft Purview solution should be configured?
⚠ Common exam trap
Many candidates confuse Communication Compliance with Data Loss Prevention (DLP), but DLP focuses on sensitive data protection (e.g., PII) rather than inappropriate language or behavioral content, which is the core of this question.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Communication Compliance
Microsoft Purview Communication Compliance is the correct solution because it is specifically designed to detect and remediate inappropriate messages in Microsoft Teams, including offensive language, harassment, and sensitive information. It uses configurable policies to automatically scan messages and apply remediation actions like flagging, notifying managers, or removing content, directly addressing the requirement for automated detection and remediation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Purview eDiscovery
Why it's wrong here
Microsoft Purview eDiscovery is a tool primarily used for identifying, preserving, collecting, and producing electronically stored information (ESI) for legal cases or internal investigations. It operates retrospectively, allowing organizations to search through existing data archives to find relevant information after an event has occurred. It is not designed for real-time monitoring or proactive detection and remediation of inappropriate content as it is being communicated.
- ✗
Microsoft Purview Insider Risk Management
Why it's wrong here
Microsoft Purview Insider Risk Management focuses on identifying, investigating, and acting on risky activities by users within an organization that could lead to data leakage, data theft, or other security incidents. It analyzes user behavior patterns, such as unusual file access, sharing, or download activities, to detect potential insider threats. This solution is centered on data security and user actions, not on the content of communications for inappropriate language or harassment.
- ✗
Microsoft Purview Data Loss Prevention
Why it's wrong here
Microsoft Purview Data Loss Prevention (DLP) policies are engineered to identify, monitor, and automatically protect sensitive information throughout its lifecycle, preventing its unauthorized sharing or exfiltration. DLP primarily uses sensitive information types, keywords, and content matching to detect data like credit card numbers or PII. Its core function is to safeguard sensitive data, not to moderate general communication content for inappropriate language or workplace harassment.
- ✓
Microsoft Purview Communication Compliance
Why this is correct
Microsoft Purview Communication Compliance is specifically designed to help organizations detect, investigate, and take action on inappropriate messages across various communication channels within the organization. It leverages machine learning and predefined or custom policies to identify content related to harassment, threats, adult content, and regulatory compliance violations. This solution provides the necessary tools for proactive monitoring, review, and remediation of problematic communications, directly addressing the requirement to automatically detect and remediate inappropriate messages.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
Key term
Communication Compliance
Communication Compliance is the set of policies, tools, and practices used by organizations to monitor, capture, and review electronic communications in order to meet regulatory, legal, and internal governance requirements.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.