Match each compliance term to its correct definition.
Drag a concept onto its matching description — or click a concept then click the description.
Where data is stored geographically
Data subject to laws of the country where it is stored
Process of identifying and delivering electronic information for legal cases
Preserve data for litigation purposes
Categorizing data based on sensitivity
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Data Loss Prevention: Helps prevent sensitive information from being shared outside the organization
Compliance terms in Microsoft 365 cover data protection, communication restrictions, data governance, and legal discovery. DLP prevents data leaks, Information Barriers control internal communication, Records Management handles retention, and eDiscovery supports legal processes.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Data Loss Prevention: Helps prevent sensitive information from being shared outside the organization
Why this is correct
Data Loss Prevention (DLP) is a critical compliance solution designed to identify, monitor, and protect sensitive information across an organization's digital estate. It uses policies to detect specific types of sensitive data, such as financial details or personally identifiable information (PII), and then prevents its unauthorized sharing, leakage, or transfer outside the organizational boundary, whether intentionally or accidentally.
Information Barriers: Restricts communication and collaboration between specific groups to avoid conflicts of interest
Why this is correct
Information Barriers (IB) are implemented to prevent specific groups or segments of users within an organization from communicating or collaborating with each other. This is crucial for managing conflicts of interest, particularly in regulated industries like finance, where it helps enforce ethical walls and comply with insider trading regulations by restricting data flow between sensitive departments.
Records Management: Manages and retains data to meet legal and regulatory obligations
Why this is correct
Records Management involves the systematic control of an organization's records throughout their lifecycle, from creation to disposition, to meet legal, regulatory, and operational requirements. This includes establishing retention policies, applying legal holds for litigation, and ensuring proper disposal, thereby maintaining data integrity and demonstrating compliance with various industry standards and laws.
eDiscovery: Identifies and collects electronic data for legal investigations
Why this is correct
eDiscovery is the process of identifying, preserving, collecting, processing, reviewing, and producing electronically stored information (ESI) in response to legal or regulatory requests. It enables organizations to efficiently locate relevant data across diverse sources, such as email, documents, and chat logs, for litigation, investigations, or audits, ensuring timely and defensible responses.
Data Loss Prevention: Restricts communication and collaboration between specific groups
Why it's wrong here
This definition is incorrect because Data Loss Prevention (DLP) primarily focuses on preventing sensitive data from leaving the organization, not on restricting communication between internal groups. While DLP can block sharing of specific content, the function of creating communication boundaries between internal user segments is specifically handled by Information Barriers to manage conflicts of interest.
Records Management: Helps prevent sensitive information from being shared outside the organization
Why it's wrong here
This statement incorrectly describes Records Management. Records Management is concerned with the lifecycle of data for legal and regulatory retention, preservation, and disposition, not with preventing sensitive information from being shared externally. The capability to prevent sensitive data from being shared outside the organization is the core function of Data Loss Prevention (DLP).
Go deeper
Learn chapter
Compliance Concepts
Key term
Information barriers
Information barriers are policies and technical controls that prevent the unauthorized flow of sensitive information between different parts of an organization to avoid conflicts of interest and ensure compliance.
Key term
Governance
Governance is the framework of policies, processes, and controls that ensures IT activities align with business goals and comply with regulations.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.