SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A multinational corporation has data stored across multiple clouds (Azure, AWS) and on-premises. The data governance team needs to create a single inventory of all data assets, automatically classify sensitive data (e.g., credit card numbers) across these sources, and track how data moves and transforms (lineage). Which Microsoft Purview solution should they use?
⚠ Common exam trap
Test-takers frequently confuse Microsoft Purview Data Map with Data Lifecycle Management, thinking both handle data classification, but Data Map specifically provides the unified inventory and lineage tracking across hybrid and multi-cloud environments, while Data Lifecycle Management only handles retention and deletion policies.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Data Map
Microsoft Purview Data Map is the correct solution because it provides a unified map of data assets across multi-cloud (Azure, AWS) and on-premises sources, supports automated sensitive data classification (e.g., credit card numbers via built-in classifiers), and tracks data lineage to show how data moves and transforms. This directly meets the requirements for a single inventory, classification, and lineage tracking.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Purview Data Map
Why this is correct
The Microsoft Purview Data Map is the foundational component for discovering and cataloging an organization's data assets across hybrid and multi-cloud environments. It automatically scans data sources, applies built-in and custom classifiers to identify sensitive information, and maps data lineage to show how data transforms and moves. This unified inventory provides a comprehensive understanding of data locations, types, and relationships, which is crucial for effective data governance and compliance in a multinational corporation.
- ✗
Microsoft Purview Compliance Manager
Why it's wrong here
Microsoft Purview Compliance Manager is designed to help organizations manage their compliance posture against various regulatory requirements and industry standards. It provides pre-built assessment templates, tracks the implementation of controls, and offers actionable recommendations to improve compliance. While essential for demonstrating adherence to regulations, it does not directly scan, map, or classify an organization's data assets, nor does it track data lineage.
When this WOULD be correct
An exam question asking which Microsoft Purview solution helps an organization assess its compliance posture against regulatory standards like GDPR or ISO 27001, and provides a compliance score with improvement actions.
- ✗
Microsoft Purview Data Lifecycle Management
Why it's wrong here
Microsoft Purview Data Lifecycle Management focuses on governing the retention and deletion of data throughout its lifecycle, aligning with regulatory requirements and business needs. It allows organizations to define and apply policies to retain data for specific periods or delete it after a certain time or event. While crucial for compliance and data hygiene, its primary function is not to discover, classify, or map the entire data estate, nor does it track the lineage of data transformations.
When this WOULD be correct
A company needs to automatically retain or delete data based on regulatory requirements (e.g., GDPR right to erasure) and manage data retention policies across Microsoft 365 and Azure. The question would ask for a solution to manage data lifecycle and retention, not data cataloging or lineage.
- ✗
Microsoft Purview eDiscovery
Why it's wrong here
Microsoft Purview eDiscovery tools are specifically engineered to identify, preserve, collect, review, and export electronically stored information (ESI) for legal or regulatory investigations. These tools enable targeted searches across various data sources to respond to specific legal holds or discovery requests. However, eDiscovery's function is reactive and case-specific, focusing on content for legal proceedings rather than proactively building a comprehensive, ongoing inventory or tracking data lineage across an entire data estate.
When this WOULD be correct
A legal team needs to search for and export relevant data from Exchange Online, SharePoint, and Teams in response to a litigation hold or regulatory investigation. In this scenario, Microsoft Purview eDiscovery would be the correct solution.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SC-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Microsoft Purview Data MapCorrect answer▾
Why this is correct
The Microsoft Purview Data Map is the foundational component for discovering and cataloging an organization's data assets across hybrid and multi-cloud environments. It automatically scans data sources, applies built-in and custom classifiers to identify sensitive information, and maps data lineage to show how data transforms and moves. This unified inventory provides a comprehensive understanding of data locations, types, and relationships, which is crucial for effective data governance and compliance in a multinational corporation.
✗Microsoft Purview Compliance ManagerWrong answer — click to see why▾
Why this is wrong here
Compliance Manager is for assessing and managing compliance postures against regulations, not for creating a data inventory, classifying sensitive data across multiple clouds, or tracking data lineage.
★ When this WOULD be the correct answer
An exam question asking which Microsoft Purview solution helps an organization assess its compliance posture against regulatory standards like GDPR or ISO 27001, and provides a compliance score with improvement actions.
Why candidates choose this
Candidates may confuse 'compliance' with data governance and assume Compliance Manager handles data classification and lineage, but it focuses on regulatory compliance management, not data asset inventory.
✗Microsoft Purview Data Lifecycle ManagementWrong answer — click to see why▾
Why this is wrong here
Microsoft Purview Data Lifecycle Management focuses on retention, deletion, and governance of data over its lifecycle, not on creating a unified inventory, automatic classification of sensitive data across multiple clouds, or tracking data lineage.
★ When this WOULD be the correct answer
A company needs to automatically retain or delete data based on regulatory requirements (e.g., GDPR right to erasure) and manage data retention policies across Microsoft 365 and Azure. The question would ask for a solution to manage data lifecycle and retention, not data cataloging or lineage.
Why candidates choose this
Candidates may confuse 'data lifecycle' with 'data governance' or think that managing data over time includes cataloging and classification, but Purview Data Lifecycle Management does not provide the inventory, classification, or lineage capabilities described.
✗Microsoft Purview eDiscoveryWrong answer — click to see why▾
Why this is wrong here
Microsoft Purview eDiscovery is designed for legal discovery of content across Microsoft 365 services, not for creating a data inventory, classifying sensitive data across multi-cloud and on-premises sources, or tracking data lineage.
★ When this WOULD be the correct answer
A legal team needs to search for and export relevant data from Exchange Online, SharePoint, and Teams in response to a litigation hold or regulatory investigation. In this scenario, Microsoft Purview eDiscovery would be the correct solution.
Why candidates choose this
Candidates may confuse eDiscovery's search and export capabilities with the data mapping and classification features of Data Map, assuming any 'discovery' tool can handle data asset inventory and lineage.
Analysis generated from the official SC-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Governance
Governance is the framework of policies, processes, and controls that ensures IT activities align with business goals and comply with regulations.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.