SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Microsoft Purview Information Protection

  Why it's wrong here

  Microsoft Purview Information Protection (MPIP) focuses on classifying, labeling, and protecting sensitive data throughout its lifecycle, regardless of where it's stored or shared. It allows organizations to apply sensitivity labels that can encrypt content, restrict access, and mark visual content, thereby enforcing data governance policies. While fundamental for protecting sensitive information, MPIP is a data-centric security mechanism and does not provide an overarching assessment of an organization's compliance against specific regulatory frameworks or generate a compliance score.

  When this WOULD be correct

  A question asks: 'Which Microsoft Purview solution should be used to classify and protect sensitive documents and emails based on content sensitivity, and apply encryption or access restrictions?'

• ✗

  Microsoft Purview Data Loss Prevention (DLP)

  Why it's wrong here

  Microsoft Purview Data Loss Prevention (DLP) is designed to identify, monitor, and automatically protect sensitive information across various locations, preventing its unauthorized sharing or transfer. It enforces policies to block or alert on specific actions involving sensitive data types, such as credit card numbers or health records. While crucial for data protection, DLP does not generate compliance scores or provide pre-built assessments against regulatory frameworks like GDPR or HIPAA; its function is operational data control.

• ✓

  Microsoft Purview Compliance Manager

  Why this is correct

  Microsoft Purview Compliance Manager is the primary solution for a compliance officer to evaluate their organization's adherence to various regulatory standards and internal policies. It provides a quantifiable compliance score, pre-built assessment templates for numerous global and industry-specific regulations (e.g., GDPR, HIPAA, ISO 27001), and actionable recommendations. This service enables organizations to manage and track improvement actions, assign responsibilities, and generate reports to demonstrate compliance posture effectively.

• ✗

  Microsoft Purview eDiscovery

  Why it's wrong here

  Microsoft Purview eDiscovery provides tools for identifying, preserving, collecting, processing, reviewing, and analyzing electronic content for legal or investigative purposes. It supports placing legal holds on data, performing targeted content searches across Microsoft 365 services, and managing cases for litigation or internal investigations. While essential for responding to regulatory inquiries or legal discovery, eDiscovery is a reactive investigative tool and does not offer continuous compliance posture assessment or a compliance score.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SC-900 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official SC-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”