SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A company wants to monitor employee communications for potential harassment or policy violations. Which Microsoft Purview solution should they use?
⚠ Common exam trap
Candidates often confuse Communication compliance with Insider risk management, but the former focuses on communication content (e.g., harassment) while the latter focuses on user behavior patterns (e.g., data exfiltration).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Communication compliance
Communication compliance is the correct solution because it is specifically designed to detect and remediate inappropriate communications, such as harassment, threats, or policy violations, by analyzing email, Microsoft Teams, and third-party messages. It uses customizable policies to scan for sensitive content, keywords, or patterns, and provides alerts for review by designated investigators.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data Loss Prevention (DLP)
Why it's wrong here
Microsoft Purview Data Loss Prevention (DLP) is primarily designed to identify, monitor, and protect sensitive information from unauthorized sharing or exfiltration. It uses policies to detect specific data types, like credit card numbers or PII, and then blocks or alerts on their transmission. DLP is not tailored for analyzing the contextual intent of general communications to detect policy violations such as harassment, focusing instead on data content.
- ✗
eDiscovery
Why it's wrong here
eDiscovery tools are utilized for identifying, preserving, collecting, processing, reviewing, and analyzing electronically stored information (ESI) in response to specific legal or regulatory requests. While it can search communication content, it functions as a reactive investigation process, not a proactive, continuous monitoring solution for general policy compliance. It's used for specific cases rather than ongoing oversight of employee communications for behavioral issues.
- ✓
Communication compliance
Why this is correct
Microsoft Purview Communication Compliance is purpose-built to help organizations detect, investigate, and act on inappropriate messages within their Microsoft 365 environment. It leverages machine learning and customizable policies to identify potential policy violations, such as harassment, threats, or regulatory non-compliance, across various communication channels. This solution provides a structured workflow for reviewers to examine flagged communications and take appropriate remedial action.
- ✗
Insider risk management
Why it's wrong here
Microsoft Purview Insider Risk Management focuses on identifying, investigating, and acting on potentially malicious or inadvertent risky activities performed by users within an organization. It correlates various signals, such as unusual data access, exfiltration attempts, or risky browser usage, to detect potential data theft or intellectual property leakage. This solution is not specifically designed for the nuanced detection of harassment within the content of communications, but rather for broader behavioral risks.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Communication Compliance
Communication Compliance is the set of policies, tools, and practices used by organizations to monitor, capture, and review electronic communications in order to meet regulatory, legal, and internal governance requirements.
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.