SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A multinational corporation must comply with several regulations including GDPR, ISO 27001, and NIST. They need a single solution that provides a compliance score, tracks their progress, and recommends specific improvement actions that can be assigned to different departments. Which Microsoft Purview solution meets these requirements?
⚠ Common exam trap
Watch out — candidates often confuse Compliance Manager with other Purview solutions like Audit or eDiscovery, which address different compliance needs (logging vs. scoring), but only Compliance Manager provides a centralized score and assignable improvement actions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A
Microsoft Purview Compliance Manager provides a unified compliance score, tracks progress over time, and offers recommended improvement actions that can be assigned to specific departments. It supports multiple regulations like GDPR, ISO 27001, and NIST by mapping controls to these frameworks, making it the correct solution for the multinational corporation's needs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A
Why this is correct
Microsoft Purview Compliance Manager is the correct solution as it provides a comprehensive dashboard to assess and manage an organization's compliance posture against various regulatory standards and industry benchmarks. It offers a real-time compliance score, recommended improvement actions, and the ability to assign and track tasks to address identified gaps. This tool is specifically designed to help multinational corporations navigate complex regulatory landscapes by simplifying compliance management and demonstrating adherence.
- ✗
B
Why it's wrong here
Microsoft Purview Data Lifecycle Management is primarily focused on governing data throughout its lifecycle, from creation to deletion, by implementing retention and deletion policies. While crucial for data governance and contributing to overall compliance, its core function is not to provide a compliance score or a centralized mechanism for tracking progress against specific regulatory frameworks like GDPR or HIPAA. It manages the data itself, rather than the compliance assessment process.
- ✗
C
Why it's wrong here
Microsoft Purview Insider Risk Management is designed to detect, investigate, and act on risky activities by users within an organization, such as data exfiltration or intellectual property theft. It leverages signals across various Microsoft 365 services to identify potential insider threats and policy violations. This solution focuses on mitigating internal risks and protecting sensitive data from misuse, rather than providing a holistic compliance score or managing an organization's adherence to external regulations.
- ✗
D
Why it's wrong here
Microsoft Purview Communication Compliance is used to monitor internal and external communications within an organization for policy violations, such as harassment, discriminatory language, or the sharing of sensitive information. It helps organizations meet regulatory requirements for communication monitoring and prevent misconduct by enabling reviewers to investigate flagged messages. However, its purpose is not to provide a comprehensive compliance score or a framework for managing overall regulatory adherence across multiple standards.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.