Describe the capabilities of Microsoft compliance solutions →mediumMultiple ChoiceObjective-mapped

DLP Policy Blocking Emails with Credit Card Numbers

Exhibit

Refer to the exhibit.

{
  "PolicyName": "GDPR DLP Policy",
  "PolicyType": "DLP",
  "Rules": [
    {
      "Name": "Block PII Sharing",
      "Conditions": {
        "ContentContains": ["SensitiveType: CreditCardNumber"],
        "RecipientIsExternal": true
      },
      "Actions": [
        {
          "Type": "BlockAccess"
        },
        {
          "Type": "NotifyUser",
          "Message": "Sharing credit card numbers is blocked."
        }
      ]
    }
  ]
}

Refer to the exhibit. A Microsoft Purview DLP policy is configured as shown. What will happen when a user tries to email an external recipient a document containing a credit card number?

Quick Answer

The correct answer is that the email will be blocked and the user will receive a notification. This is because the Microsoft Purview DLP policy shown includes an action to block access to the sensitive content—here, a credit card number—and simultaneously notify the user via a policy tip or email alert. The policy does not quarantine the message, allow it to be sent, or merely log the event; the explicit “block” action prevents delivery to the external recipient. On the SC-900 exam, this scenario tests your understanding of how DLP policy actions enforce data protection in real time, often appearing as a multiple-choice question where distractors confuse “block” with “quarantine” or “log only.” A common trap is assuming that DLP always quarantines emails, but remember: if the policy says “block,” the message never leaves the user’s outbox. Memory tip: “Block and notify” is the DLP default for high-risk content like credit cards—think of it as a digital bouncer who stops the email and hands the user a warning slip.

⚠ Common exam trap

Test-takers frequently confuse the 'Block' action with 'Block with override' or assume that DLP policies only log events without blocking, leading them to choose Option D or Option C.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The email will be blocked and the user will receive a notification

The DLP policy is configured with the action 'Block' and the user notification is enabled. When a user attempts to email a document containing a credit card number to an external recipient, the policy blocks the email from being sent and displays a notification to the user explaining the policy violation. This is the default behavior for a 'Block' action with user notification in Microsoft Purview DLP.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The email will be sent but the attachment will be removed
Why it's wrong here
The policy blocks the entire email.
✓
The email will be blocked and the user will receive a notification
Why this is correct
The policy includes BlockAccess and NotifyUser actions.
✗
The email will be delivered and the admin will be alerted
Why it's wrong here
BlockAccess prevents delivery.
✗
The email will be sent and the event will be logged for audit
Why it's wrong here
BlockAccess prevents sending.

Go deeper

3 more ways this is tested on SC-900

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. Your organization needs to ensure that emails containing personally identifiable information (PII) like passport numbers are automatically encrypted before being sent externally. What should you configure in Microsoft Purview?

hard

A.A retention label that encrypts the email
✓ B.A DLP policy with the 'Encrypt' action
C.A communication compliance policy
D.An information barrier policy

Why B: Data Loss Prevention (DLP) policies in Microsoft Purview can automatically detect emails containing sensitive information types (e.g., passport numbers) and apply the 'Encrypt' action to enforce encryption before the email is sent externally. This leverages Microsoft 365 Message Encryption (OME) to protect the data in transit.

Variation 2. An organization needs to prevent users from sharing files containing trade secrets with external parties via email. The solution must allow internal sharing. Which Microsoft Purview capability should be configured?

medium

A.Microsoft Purview Communication Compliance
✓ B.Microsoft Purview Data Loss Prevention policies
C.Microsoft Purview Data Lifecycle Management
D.Microsoft Purview Sensitivity Labels with encryption

Why B: Microsoft Purview Data Loss Prevention (DLP) policies are designed to detect and block the sharing of sensitive information—such as trade secrets—via email or other channels, while still allowing internal sharing. DLP can inspect email content and attachments for sensitive data types and apply actions like blocking external sends, making it the correct choice for this requirement.

Variation 3. Your organization needs to create a policy that prevents users from sharing credit card numbers in emails. Which Microsoft Purview solution should you configure?

easy

A.Communication Compliance
B.Retention policy
C.eDiscovery
✓ D.Data loss prevention (DLP) policy

Why D: Data loss prevention (DLP) policies in Microsoft Purview are specifically designed to identify, monitor, and automatically protect sensitive information—such as credit card numbers—across Exchange Online, SharePoint, OneDrive, and Teams. By configuring a DLP policy with a credit card number sensitive info type, the organization can block users from sending emails containing those patterns, either by preventing the email from being sent or by triggering a policy tip. This directly addresses the requirement to prevent sharing of credit card numbers in emails.

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.

DLP Policy Blocking Emails with Credit Card Numbers

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question

3 more ways this is tested on SC-900