SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
An organization uses Microsoft Purview Communication Compliance. They need to monitor Microsoft Teams messages for potential insider trading language. What should they configure?
⚠ Common exam trap
Candidates often confuse Communication Compliance with Data Loss Prevention (DLP), mistakenly thinking DLP can monitor for language patterns when DLP is actually focused on preventing data exfiltration, not analyzing conversation content for prohibited phrases.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A Communication Compliance policy
B is correct because Microsoft Purview Communication Compliance is specifically designed to detect and remediate inappropriate or policy-violating communications, including insider trading language in Microsoft Teams messages. By configuring a Communication Compliance policy, the organization can define custom conditions (e.g., keywords, patterns, or classifiers) to scan Teams chats and channels for prohibited financial language, enabling automated alerts and remediation workflows.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
An eDiscovery case
Why it's wrong here
eDiscovery (Standard or Premium) in Microsoft Purview is designed for identifying, preserving, collecting, processing, reviewing, and analyzing electronically stored information (ESI) for legal or investigative purposes. While it deals with communications, its primary function is a reactive response to litigation or internal investigations, not proactive monitoring for policy violations like harassment or regulatory compliance. It's a tool for *after* an incident or request, not for real-time or near real-time compliance monitoring of ongoing communications.
- ✓
A Communication Compliance policy
Why this is correct
Microsoft Purview Communication Compliance is specifically designed to help organizations detect, investigate, and act on inappropriate messages within their Microsoft 365 environment. It uses intelligent templates and machine learning to identify potential policy violations, such as harassment, threats, or regulatory non-compliance, across various communication channels like Microsoft Teams, Exchange Online, and Yammer. This proactive monitoring capability directly addresses the need to ensure appropriate communication conduct and foster a respectful workplace.
- ✗
A Data Loss Prevention policy
Why it's wrong here
A Microsoft Purview Data Loss Prevention (DLP) policy is primarily focused on identifying, monitoring, and automatically protecting sensitive information from being shared inappropriately or leaving the organization's control. While DLP policies can detect sensitive content within communications, their core purpose is to prevent data exfiltration or unauthorized sharing of specific data types (e.g., credit card numbers, PII). DLP does not monitor for general inappropriate communication behavior like harassment or discriminatory language, which is the specific domain of Communication Compliance.
- ✗
A sensitivity label policy
Why it's wrong here
A sensitivity label policy in Microsoft Purview is used to define and apply sensitivity labels to classify and protect data. These labels allow users to categorize content based on its sensitivity (e.g., Confidential, Highly Confidential) and apply associated protection actions like encryption or visual markings, thereby governing data usage. While labels help manage data governance, they do not actively monitor the content of communications for behavioral policy violations or inappropriate language; their role is content classification and protection, not behavioral compliance monitoring.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Compliance policy
A compliance policy is a set of rules that ensures devices, users, and applications meet an organization's security and regulatory requirements before they can access corporate resources.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.