SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A financial services company needs to monitor employee communications in Microsoft Teams and Exchange Online for potential policy violations, such as sharing insider trading tips. They want to automatically detect specific keywords and phrases, and then allow designated reviewers to flag and escalate the messages. Which Microsoft Purview solution should they use?
⚠ Common exam trap
Many candidates confuse Communication Compliance with eDiscovery, assuming eDiscovery can proactively monitor and flag messages, but eDiscovery is reactive and designed for legal holds and searches, not real-time policy violation detection and review workflows.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Communication Compliance
Microsoft Purview Communication Compliance is the correct solution because it is specifically designed to detect policy violations in communications like Microsoft Teams chats and Exchange Online emails. It uses customizable policies to automatically scan for sensitive keywords and phrases (e.g., insider trading terms), and then routes flagged messages to designated reviewers for investigation, flagging, and escalation. This aligns directly with the requirement to monitor employee communications for policy violations and enable reviewer workflows.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Purview Communication Compliance
Why this is correct
Microsoft Purview Communication Compliance proactively identifies and remediates code-of-conduct policy violations and regulatory compliance risks within an organization's communications. It leverages machine learning and customizable policies to detect inappropriate content, sensitive information sharing, or potential insider trading across various communication channels, enabling organizations to monitor employee conduct effectively.
- ✗
Microsoft Purview Data Lifecycle Management
Why it's wrong here
Microsoft Purview Data Lifecycle Management (formerly Microsoft 365 Records Management) is designed to govern data throughout its lifecycle, from creation to disposition. Its primary function is to define and enforce retention and deletion policies for various data types, ensuring compliance with legal and regulatory requirements, rather than actively monitoring communication content for policy violations.
- ✗
Microsoft Purview Information Barriers
Why it's wrong here
Microsoft Purview Information Barriers prevent specific groups of users from communicating or collaborating with each other, primarily to avoid conflicts of interest or maintain confidentiality in regulated industries. This solution enforces communication segmentation at a structural level, proactively blocking interactions, rather than monitoring or reviewing the content of communications for policy violations after they occur.
- ✗
Microsoft Purview eDiscovery
Why it's wrong here
Microsoft Purview eDiscovery (Standard and Premium) is a reactive tool used primarily for legal, regulatory, or internal investigations. It enables organizations to identify, preserve, collect, process, review, and export electronically stored information (ESI) in response to specific legal holds or data requests, rather than providing continuous, proactive monitoring of employee communications for ongoing policy adherence.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.