Describe the capabilities of Microsoft compliance solutions →mediumMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

Refer to the exhibit.

{
  "PolicyName": "HR DLP Policy",
  "Rules": [
    {
      "Name": "Credit Card Rule",
      "Conditions": {
        "SensitiveInformation": {
          "SensitiveInfoTypeId": "Credit Card Number",
          "Count": 1
        },
        "Location": "All locations"
      },
      "Actions": [
        {
          "ActionType": "BlockAccess",
          "Behavior": "BlockExternal"
        },
        {
          "ActionType": "NotifyUser",
          "NotifyUserType": "User"
        }
      ]
    }
  ]
}

A compliance administrator creates the DLP policy shown in the exhibit. When a user shares a document containing a credit card number with an external partner, what is the expected outcome?

⚠ Common exam trap

Candidates often confuse DLP actions with sensitivity label auto-classification or assume DLP deletes content, but DLP only blocks or restricts sharing based on policy rules.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The document is blocked from being shared externally, and the user receives a notification.

The DLP policy is configured with an action to block external sharing and notify the user when a credit card number is detected. When the user shares the document externally, the policy triggers this action, preventing the share and sending a notification to the user. This matches option A exactly.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
The document is blocked from being shared externally, and the user receives a notification.
Why this is correct
This DLP policy is configured with an action to 'BlockAccess' specifically targeting 'BlockExternal' sharing. Consequently, any document matching the policy's conditions will be prevented from being shared outside the organization. Concurrently, the 'NotifyUser' action ensures that the individual attempting the sharing receives an immediate notification, informing them of the policy violation and the blocked action.
✗
The document is automatically deleted.
Why it's wrong here
Microsoft Purview DLP policies are designed to prevent sensitive data from leaving an organization, not to destroy it. There is no standard action within a DLP policy configuration that would automatically delete a document upon detection of a policy violation. Such an an action would typically require a separate retention or deletion policy, or manual intervention, rather than being a direct outcome of a DLP enforcement.
✗
A sensitivity label is automatically applied.
Why it's wrong here
While sensitivity labels are a critical component of information protection, their automatic application is not an inherent action of every DLP policy. Applying a sensitivity label requires a specific configuration, either through an auto-labeling policy or as an explicit action within a DLP rule. This particular DLP policy is focused on blocking sharing and user notification, not on modifying the document's labeling metadata.
✗
The document is blocked from being shared both internally and externally.
Why it's wrong here
The DLP policy explicitly specifies an action to 'BlockAccess' with the scope set to 'BlockExternal'. This precise configuration means that only attempts to share the document outside the organizational boundary will be prevented. Internal sharing, such as with colleagues within the same Microsoft 365 tenant, would not be affected or blocked by this specific policy rule.

Go deeper

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question