Match each Microsoft 365 compliance feature to its function.
Drag a concept onto its matching description — or click a concept then click the description.
Prevent accidental sharing of sensitive info
Record user and admin activity
Keep or delete data for a specified time
Classify and protect content
Track compliance posture and recommendations
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
eDiscovery: Search and export content from various data sources
The correct matches are: eDiscovery for searching and exporting content, Retention policies for managing retention and deletion, and Sensitivity labels for classifying and protecting data. Common confusions include mixing DLP with Sensitivity labels, and Communication Compliance with DLP.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
eDiscovery: Search and export content from various data sources
Why this is correct
Microsoft 365 eDiscovery provides tools to search for and collect electronic content across various data sources, including Exchange mailboxes, SharePoint sites, OneDrive accounts, and Microsoft Teams. This feature is crucial for legal investigations, regulatory compliance, and internal audits, enabling organizations to identify, preserve, collect, and export relevant information in response to legal requests or internal inquiries. Its primary function is to facilitate the discovery process for legal and compliance teams.
Data Loss Prevention: Classify and protect data with encryption and visual markings
Why it's wrong here
The statement incorrectly describes Data Loss Prevention. DLP policies are designed to identify, monitor, and automatically protect sensitive information across Microsoft 365 services by preventing its unauthorized sharing or exfiltration. While DLP can block sharing, encrypt content, or notify users, its core function is to detect and prevent data loss, not primarily to classify data with encryption and visual markings, which is a key capability of Sensitivity Labels.
Retention policies: Apply retention and deletion rules to content
Why this is correct
Microsoft 365 retention policies are correctly defined as applying specific rules for retaining and deleting content across various locations like Exchange, SharePoint, OneDrive, and Teams. These policies ensure that data is kept for a minimum required period to meet regulatory, legal, or business obligations, and then automatically deleted when no longer needed. This systematic approach helps organizations manage data lifecycle, reduce storage costs, and comply with data governance requirements.
Sensitivity labels: Classify and protect data with encryption and visual markings
Why this is correct
Sensitivity labels in Microsoft 365 correctly classify and protect data with encryption and visual markings, such as headers, footers, or watermarks. These labels can be applied manually by users or automatically based on content, providing persistent protection that travels with the data, regardless of where it's stored or shared. This capability helps enforce data governance, prevent unauthorized access, and ensure compliance with information protection standards.
Communication Compliance: Detect and prevent accidental sharing of sensitive information
Why it's wrong here
The statement incorrectly describes Communication Compliance. Communication Compliance in Microsoft 365 is designed to help organizations detect, investigate, and act on inappropriate messages or communications within their environment, often related to regulatory compliance or insider risk. It monitors for specific policy violations in communications, such as harassment, threats, or sharing of sensitive information, but its primary role is not to prevent accidental sharing of sensitive information, which is a core function of Data Loss Prevention.
Go deeper
Learn chapter
Compliance Concepts
Key term
Labels
Labels are descriptive text or tags attached to IT resources to organize, identify, and manage them based on attributes like purpose, environment, or owner.
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.