Microsoft Purview DLP: Block Sensitive Data in Email
A financial services company uses Microsoft 365 and must comply with PCI DSS. They want to automatically prevent users from sending emails that contain credit card numbers to external recipients. If a user tries to send such an email, the system should block the message and notify the user with a policy tip. Which Microsoft Purview solution should they configure?
Quick Answer
The answer is Data Loss Prevention (DLP). Microsoft Purview DLP is the correct solution because it is purpose-built to detect and block sensitive data, such as credit card numbers, while in transit via email. By configuring a DLP policy with the built-in sensitive info type for credit card numbers, you can set the action to block the message and display a policy tip to the sender, directly enforcing PCI DSS compliance. On the SC-900 exam, this scenario tests your understanding of how Purview solutions map to specific compliance controls—a common trap is confusing DLP with Microsoft Defender for Office 365, which focuses on malware and phishing rather than data content. Remember the memory tip: DLP stands for “Data Loss Prevention,” and in this case, you are preventing the loss of credit card data by blocking it before it leaves your organization.
⚠ Common exam trap
Test-takers frequently confuse Information Protection (labels/encryption) with DLP, but Information Protection does not provide real-time blocking of outbound data; it only applies protection after classification, whereas DLP actively monitors and blocks data in motion.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP)
Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect and block sensitive data, such as credit card numbers, in transit (e.g., email). DLP policies can be configured with conditions to match credit card number patterns (using a built-in sensitive info type) and set actions to block the message and display a policy tip to the sender, meeting the PCI DSS compliance requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data Loss Prevention (DLP)
Why this is correct
Microsoft Purview DLP policies can automatically detect sensitive data (e.g., credit card numbers) and take actions such as blocking the email and notifying the sender with a policy tip.
- ✗
Communication Compliance
Why it's wrong here
Communication Compliance is used to review and analyze communications for regulatory compliance (e.g., insider trading), not to block data exfiltration in real time.
- ✗
Information Protection
Why it's wrong here
Information Protection focuses on classifying data and applying sensitivity labels, but it does not enforce blocking of emails based on content; DLP provides the enforcement.
- ✗
Insider Risk Management
Why it's wrong here
Insider Risk Management detects patterns of risky behavior by users, but it does not prevent real-time email transmissions containing sensitive data.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on SC-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company wants to prevent users from sharing files containing personally identifiable information (PII) with external recipients. They also need to notify users if they attempt to share such files. Which Microsoft Purview solution should be configured?
hard- A.Microsoft Purview Sensitivity Labels
- B.Microsoft Purview Communication Compliance
- C.Microsoft Purview eDiscovery
- ✓ D.Microsoft Purview Data Loss Prevention
Why D: Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect, prevent, and notify users about the sharing of sensitive data, such as personally identifiable information (PII), with external recipients. DLP policies can be configured to automatically block the sharing of files containing PII and display a policy tip notification to the user when they attempt to share such content.
Variation 2. A financial services company is required by regulation to prevent sensitive customer financial information from being shared externally via email. The compliance team wants to automatically scan all outgoing emails for patterns that match credit card numbers or account numbers. If a match is found, the email should be blocked and the sender should receive a policy tip. Which Microsoft Purview solution should be configured?
medium- A.Microsoft Purview Audit
- B.Microsoft Purview Data Lifecycle Management
- ✓ C.Microsoft Purview Data Loss Prevention (DLP)
- D.Microsoft Purview eDiscovery
Why C: Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect and block sensitive information—such as credit card numbers and account numbers—in outgoing emails. DLP policies can scan email content and attachments for predefined sensitive information types, and when a match is found, the email can be blocked and a policy tip sent to the sender, meeting the compliance requirement.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.