Microsoft Purview Communication Compliance for Insider Trading Detection
A financial services firm must monitor employee communications (email and Microsoft Teams) for potential insider trading. The compliance team wants to automatically detect messages containing specific financial keywords (e.g., 'non-public material information') and flag them for review. They also need to be able to remove violating messages from recipients' inboxes. Which Microsoft Purview solution should they configure?
Quick Answer
The correct answer is Microsoft Purview Communication Compliance. This solution is specifically built to detect and remediate insider trading signals by automatically scanning emails and Microsoft Teams messages for configurable sensitive information types, such as the keyword phrase 'non-public material information,' and then flagging them for compliance review. Crucially, it also enforces remediation actions like removing violating messages from recipients' inboxes, which directly addresses the firm’s need to contain potential insider trading communications. On the SC-900 exam, this scenario tests your understanding of how Communication Compliance differs from other Purview solutions like Data Loss Prevention or eDiscovery—a common trap is confusing it with DLP, which prevents data leaks but does not remove messages from inboxes. Remember the memory tip: “Communication Compliance catches the conversation, DLP catches the file.”
⚠ Common exam trap
Candidates often confuse Communication Compliance (which detects and remediates message content) with Insider Risk Management (which focuses on behavioral analytics and risk scoring), leading candidates to choose the latter despite its inability to perform keyword-based message removal.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Communication Compliance
Communication Compliance is the correct solution because it is specifically designed to detect and remediate inappropriate communications, including insider trading signals. It can automatically scan emails and Microsoft Teams messages for configurable sensitive information types (e.g., 'non-public material information') and enforce actions like removing violating messages from recipients' inboxes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data Lifecycle Management
Why it's wrong here
Data Lifecycle Management manages retention and deletion policies, not communication monitoring.
- ✓
Communication Compliance
Why this is correct
Communication Compliance detects policy violations in messages and allows actions like removal.
- ✗
Insider Risk Management
Why it's wrong here
Insider Risk Management detects risky user activities and behaviors, not specific keyword monitoring in communications.
- ✗
Audit
Why it's wrong here
Audit provides logs of user activities but does not automatically flag messages based on content.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Communication Compliance
Communication Compliance is the set of policies, tools, and practices used by organizations to monitor, capture, and review electronic communications in order to meet regulatory, legal, and internal governance requirements.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SC-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A financial services company uses Microsoft Purview and must comply with a regulation that requires communication surveillance for market abuse. They need to capture all electronic communications (email, Teams chats) of traders and scan for specific keywords and trading patterns. Which Microsoft Purview solution is specifically designed for this?
hard- ✓ A.Communication Compliance
- B.Data Lifecycle Management
- C.eDiscovery (Standard)
- D.Insider Risk Management
Why A: Communication Compliance is the Microsoft Purview solution specifically designed to capture and analyze electronic communications (email, Teams chats) for regulatory compliance, such as detecting market abuse. It allows organizations to define policies that scan for specific keywords and trading patterns, automatically flagging messages that violate compliance rules. This directly addresses the requirement for communication surveillance in financial services under regulations like MiFID II or Dodd-Frank.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.