SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A financial services company is subject to regulations that require monitoring of employee communications for potential market manipulation. The compliance team needs to create policies that automatically detect messages containing phrases like 'insider info' or 'confidential trade' in Microsoft Teams chats and Exchange Online emails. Detected messages should be routed to designated reviewers for investigation, and the company wants a built-in Microsoft Purview solution to handle this process. Which Microsoft Purview solution should they use?
⚠ Common exam trap
A common mix-up: candidates confuse Insider Risk Management (which focuses on user behavior patterns) with Communication Compliance (which focuses on content scanning), leading them to select Option B when the question explicitly requires detection of specific phrases in messages.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Communication Compliance
Microsoft Purview Communication Compliance is the correct solution because it is specifically designed to detect and investigate policy violations in organizational communications, such as Microsoft Teams chats and Exchange Online emails. It allows compliance teams to create custom policies that automatically scan for sensitive phrases like 'insider info' or 'confidential trade' and route flagged messages to designated reviewers for investigation, meeting the regulatory monitoring requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Purview Communication Compliance
Why this is correct
Microsoft Purview Communication Compliance is specifically designed to help organizations meet stringent regulatory compliance requirements by proactively identifying and managing inappropriate communications. It leverages machine learning and predefined or custom policies to scan messages across various communication channels for specific keywords, phrases, and content patterns indicative of policy violations like insider trading, harassment, or regulatory breaches. Detected items are then routed for review and remediation, ensuring adherence to internal policies and external regulations.
- ✗
Microsoft Purview Insider Risk Management
Why it's wrong here
Microsoft Purview Insider Risk Management is designed to identify, triage, and act on risky activities by users within an organization, such as data exfiltration, intellectual property theft, or policy violations. It correlates signals from various sources like file activities, email, and device usage to detect patterns of potentially malicious or inadvertent insider risk. However, its primary function is not to scan the *content* of communications for specific phrases or regulatory violations, but rather to analyze user behavior and activity patterns.
- ✗
Microsoft Purview Information Protection
Why it's wrong here
Microsoft Purview Information Protection (MPIP) provides capabilities for discovering, classifying, labeling, and protecting sensitive information across its lifecycle, both inside and outside the organization. It uses sensitivity labels to apply encryption, visual markings, and access restrictions to documents and emails based on their content and classification. While crucial for data governance and preventing data loss, MPIP's primary function is not to actively monitor or detect policy violations within communication *content* for regulatory compliance purposes.
When this WOULD be correct
A company needs to automatically classify and protect emails containing financial data (e.g., credit card numbers) by applying encryption and access restrictions. The question would ask for a solution to label and safeguard sensitive information.
- ✗
Microsoft Purview Data Lifecycle Management
Why it's wrong here
Microsoft Purview Data Lifecycle Management (formerly Microsoft 365 Records Management) focuses on managing the lifecycle of data, including its retention, deletion, and disposition, to meet legal, regulatory, and business requirements. It enables organizations to define retention policies for various content types, ensuring data is kept for the required period and then defensibly deleted. However, it does not provide real-time monitoring or scanning of communication *content* for policy violations or regulatory breaches like insider trading.
When this WOULD be correct
A company needs to automatically retain all employee communications for 7 years to meet industry regulations and then securely delete them. Microsoft Purview Data Lifecycle Management would be the correct solution for setting retention and deletion policies.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SC-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Microsoft Purview Communication ComplianceCorrect answer▾
Why this is correct
Microsoft Purview Communication Compliance is specifically designed to help organizations meet stringent regulatory compliance requirements by proactively identifying and managing inappropriate communications. It leverages machine learning and predefined or custom policies to scan messages across various communication channels for specific keywords, phrases, and content patterns indicative of policy violations like insider trading, harassment, or regulatory breaches. Detected items are then routed for review and remediation, ensuring adherence to internal policies and external regulations.
✗Microsoft Purview Information ProtectionWrong answer — click to see why▾
Why this is wrong here
Microsoft Purview Information Protection focuses on classifying and protecting sensitive data (e.g., via labels and encryption), not on monitoring communications for policy violations like market manipulation phrases.
★ When this WOULD be the correct answer
A company needs to automatically classify and protect emails containing financial data (e.g., credit card numbers) by applying encryption and access restrictions. The question would ask for a solution to label and safeguard sensitive information.
Why candidates choose this
Candidates may confuse 'information protection' with 'communication compliance' because both involve handling sensitive content, but Information Protection is about data classification and encryption, not communication monitoring.
✗Microsoft Purview Data Lifecycle ManagementWrong answer — click to see why▾
Why this is wrong here
Data Lifecycle Management focuses on retaining and deleting data based on policies, not on detecting and reviewing specific message content for regulatory compliance.
★ When this WOULD be the correct answer
A company needs to automatically retain all employee communications for 7 years to meet industry regulations and then securely delete them. Microsoft Purview Data Lifecycle Management would be the correct solution for setting retention and deletion policies.
Why candidates choose this
Candidates may confuse lifecycle management with compliance monitoring because both involve data governance, but DLM does not include content detection or review workflows.
Analysis generated from the official SC-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Microsoft Teams
Microsoft Teams is a collaboration platform that integrates chat, video meetings, file storage, and application integration into a single workspace, primarily used within the Microsoft 365 ecosystem.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.