SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Create labels, then Publish labels, then Set auto-labeling rules, then Run scans, then Review results

  Why this is correct

  This is the correct order because labels must first be created and published so they are available, then auto-labeling rules can reference them, followed by running scans to apply the rules, and finally reviewing the results.

• ✗

  Create labels, then Set auto-labeling rules, then Publish labels, then Run scans, then Review results

  Why it's wrong here

  This order is incorrect because auto-labeling rules cannot be effectively set before labels are published. Sensitivity labels must be published to a label policy, making them available to users and services, before auto-labeling rules can reference and apply them. Attempting to define rules for unpublished labels would result in an invalid or non-functional policy, as the system would not recognize the target labels for automatic application.

• ✗

  Run scans, then Create labels, then Publish labels, then Set auto-labeling rules, then Review results

  Why it's wrong here

  This sequence is incorrect because running scans prematurely, before labels are created and auto-labeling rules are configured, would be futile. Data classification scans rely on predefined sensitivity labels to identify and categorize data, and auto-labeling rules to determine how these labels should be applied. Without these foundational elements in place, a scan would not have any criteria to classify data and would yield no meaningful information protection results.

• ✗

  Create labels, then Publish labels, then Run scans, then Set auto-labeling rules, then Review results

  Why it's wrong here

  This order is incorrect because the data classification scan must occur after auto-labeling rules have been established. The purpose of running the scan in this context is to apply the configured auto-labeling policies to data at rest or in transit. If the scan is executed before these rules are defined, it will not perform any automatic content-based classification, negating the primary objective of an automated data classification process.

Go deeper

Related to this question