SC-900 Practice Question: Describe the concepts of security, compliance, and identity
A Microsoft 365 organization needs to classify and protect sensitive documents based on their content, such as passport numbers. They want the classification to be applied automatically without user intervention. Which Microsoft Purview solution should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Auto-labeling with sensitivity labels
Auto-labeling in Microsoft Purview Information Protection uses policy rules to automatically apply sensitivity labels to documents containing sensitive info like passport numbers. Trainable classifiers are used for more complex patterns but require training. Data Loss Prevention (DLP) can detect and protect but does not label documents by default. Unified labeling is a client-side feature requiring user action.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Unified labeling client
Why it's wrong here
The unified labeling client, such as the Azure Information Protection (AIP) client, facilitates the manual application of sensitivity labels by users directly within applications like Word, Excel, and Outlook. While it enables users to classify and protect documents and emails, it does not provide an automatic mechanism for an organization to classify and protect content without user intervention. Therefore, it is not the solution for automatic classification and protection at scale.
- ✗
Data Loss Prevention (DLP) policies
Why it's wrong here
Data Loss Prevention (DLP) policies are designed to identify, monitor, and protect sensitive information across Microsoft 365 services by preventing its unauthorized sharing or transmission. While DLP policies can detect sensitive content and enforce protective actions like blocking or notifying, their primary function is data egress control and risk mitigation, not the automatic application of sensitivity labels for content classification and persistent protection. They act on detected content rather than labeling it for classification.
- ✗
Trainable classifiers
Why it's wrong here
Trainable classifiers leverage machine learning to identify specific categories of content, such as contracts, invoices, or resumes, based on examples provided by an organization. While these classifiers are a powerful tool for identifying content types and can be integrated into auto-labeling policies as a condition, they are a classification method rather than the comprehensive solution for automatically applying sensitivity labels and their associated protection actions across an organization's data. They define what to look for, not how to apply the label and protection.
- ✓
Auto-labeling with sensitivity labels
Why this is correct
Auto-labeling with sensitivity labels is the precise solution for automatically classifying and protecting sensitive information across Microsoft 365 services without user intervention. This feature allows administrators to configure policies that automatically apply specific sensitivity labels, along with their predefined encryption, visual marking, and access restrictions, based on detected sensitive information types, keywords, or trainable classifiers within content. It directly addresses the need for both automatic classification and persistent protection.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Data Loss Prevention
Data Loss Prevention (DLP) is a set of tools and processes that help organizations stop sensitive information from being shared, leaked, or stolen, whether accidentally or on purpose.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.