SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A financial services firm uses Microsoft Purview Information Barriers to prevent traders from communicating with investment bankers. A new employee in the trading department cannot access a SharePoint site used for compliance training. What should the administrator do?
⚠ Common exam trap
Many exam-takers confuse Microsoft 365 groups with Purview segments, assuming that adding a user to a group will automatically resolve Information Barrier restrictions, when in fact segments are the only mechanism for defining user roles in these policies.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add the employee to the 'Traders' segment in Microsoft Purview Information Barriers.
Microsoft Purview Information Barriers use segments to group users based on their organizational roles. Adding the new employee to the 'Traders' segment ensures that the Information Barrier policy applies to them correctly, allowing them to access the compliance training SharePoint site while still being blocked from communicating with investment bankers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add the employee to the 'Traders' Microsoft 365 group.
Why it's wrong here
Information Barriers (IB) in Microsoft Purview define user segments based on specific user attributes synchronized from Microsoft Entra ID, such as 'Department' or 'CustomAttribute', not on membership in standard Microsoft 365 groups. Adding an employee to a Microsoft 365 group would not alter their assigned IB segment or override any existing IB policy restrictions. Therefore, this action would not enable the employee to communicate with the 'Traders' segment if they are not already part of it via their defined attributes.
- ✓
Add the employee to the 'Traders' segment in Microsoft Purview Information Barriers.
Why this is correct
Microsoft Purview Information Barriers operate by defining distinct user segments based on specific user attributes and then applying policies to restrict communication and collaboration between these segments. To allow an employee to legitimately communicate and collaborate with others in the 'Traders' segment, their user account must be correctly assigned to that 'Traders' segment. This is typically achieved by updating the relevant user attribute in Microsoft Entra ID that defines the 'Traders' segment, ensuring compliance with the established IB policies.
- ✗
Use the 'Override' option in the Information Barrier policy.
Why it's wrong here
Microsoft Purview Information Barriers are designed to enforce strict compliance boundaries, preventing unauthorized communication and collaboration between specified user segments without exception. Unlike some other compliance features, IB policies do not include an 'override' or 'exception' mechanism to bypass their restrictions. Their fundamental purpose is to create hard, non-negotiable walls, meaning any attempt to circumvent a policy would require disabling or modifying the policy itself, which undermines the strict enforcement objective.
- ✗
Disable the Information Barrier policy for the trading department.
Why it's wrong here
Disabling an Information Barrier policy would completely remove the critical compliance control designed to prevent unauthorized communication and collaboration between the trading department and other restricted segments. This action would directly violate the firm's regulatory obligations and expose sensitive information, as it eliminates the very mechanism intended to enforce ethical walls and prevent conflicts of interest. The objective is to enable legitimate communication within a defined segment, not to dismantle the protective barrier entirely.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.