Courseiva

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

A company wants to monitor employee communications for potential harassment or policy violations. Which Microsoft Purview solution should they use?

⚠ Common exam trap

Candidates often confuse Communication compliance with Insider risk management, but the former focuses on communication content (e.g., harassment) while the latter focuses on user behavior patterns (e.g., data exfiltration).

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Communication compliance

Communication compliance is the correct solution because it is specifically designed to detect and remediate inappropriate communications, such as harassment, threats, or policy violations, by analyzing email, Microsoft Teams, and third-party messages. It uses customizable policies to scan for sensitive content, keywords, or patterns, and provides alerts for review by designated investigators.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Data Loss Prevention (DLP)

    Why it's wrong here

    Microsoft Purview Data Loss Prevention (DLP) is primarily designed to identify, monitor, and protect sensitive information from unauthorized sharing or exfiltration. It uses policies to detect specific data types, like credit card numbers or PII, and then blocks or alerts on their transmission. DLP is not tailored for analyzing the contextual intent of general communications to detect policy violations such as harassment, focusing instead on data content.

  • eDiscovery

    Why it's wrong here

    eDiscovery tools are utilized for identifying, preserving, collecting, processing, reviewing, and analyzing electronically stored information (ESI) in response to specific legal or regulatory requests. While it can search communication content, it functions as a reactive investigation process, not a proactive, continuous monitoring solution for general policy compliance. It's used for specific cases rather than ongoing oversight of employee communications for behavioral issues.

  • Communication compliance

    Why this is correct

    Microsoft Purview Communication Compliance is purpose-built to help organizations detect, investigate, and act on inappropriate messages within their Microsoft 365 environment. It leverages machine learning and customizable policies to identify potential policy violations, such as harassment, threats, or regulatory non-compliance, across various communication channels. This solution provides a structured workflow for reviewers to examine flagged communications and take appropriate remedial action.

  • Insider risk management

    Why it's wrong here

    Microsoft Purview Insider Risk Management focuses on identifying, investigating, and acting on potentially malicious or inadvertent risky activities performed by users within an organization. It correlates various signals, such as unusual data access, exfiltration attempts, or risky browser usage, to detect potential data theft or intellectual property leakage. This solution is not specifically designed for the nuanced detection of harassment within the content of communications, but rather for broader behavioral risks.

Go deeper

Related to this question

About these practice questions

One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.