Microsoft Purview Capabilities: Data Classification, Data Loss Prevention, and Data Lifecycle Management
Which THREE capabilities are provided by Microsoft Purview? (Choose three.)
Quick Answer
The answer is data loss prevention (DLP), data classification, and data lifecycle management. These three capabilities form the core of Microsoft Purview’s unified data governance and compliance solution, enabling organizations to understand their data, protect sensitive information, and manage data retention and deletion policies. On the SC-900 exam, this question tests your ability to distinguish Purview’s specific portfolio from adjacent Microsoft security products. A common trap is confusing Purview’s data loss prevention with Microsoft Entra’s identity protection features, or mixing up data lifecycle management with Microsoft Defender’s threat protection capabilities. To remember the three pillars, think of the acronym “CDL”: Classification (know your data), DLP (protect your data), and Lifecycle (manage your data from creation to deletion).
⚠ Common exam trap
Many candidates confuse Microsoft Purview's data security capabilities (classification, DLP, retention) with identity or threat management features that belong to Microsoft Entra ID or Microsoft Defender solutions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data classification and labeling
Microsoft Purview provides data classification and labeling capabilities, enabling organizations to identify, categorize, and protect sensitive data across their digital estate. This includes automatic and manual labeling of documents and emails based on content inspection and machine learning classifiers, which is a core function of the Microsoft Purview Information Protection solution.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data classification and labeling
Why this is correct
Purview classifies and labels sensitive data.
- ✓
Data lifecycle management and retention
Why this is correct
Purview manages data retention and deletion.
- ✓
Data loss prevention (DLP)
Why this is correct
Purview provides DLP for data protection.
- ✗
Identity protection and risk detection
Why it's wrong here
Identity Protection is a Microsoft Entra feature.
- ✗
Threat and vulnerability management
Why it's wrong here
Threat and vulnerability management is a Microsoft Defender feature.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Data classification
Data classification is the process of organizing data into categories based on its sensitivity, value, and criticality to an organization, so that appropriate security controls can be applied.
Key term
Information protection
Information protection refers to the policies, procedures, and technologies used to safeguard data from unauthorized access, disclosure, alteration, or destruction.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SC-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE are capabilities of Microsoft Purview Data Loss Prevention (DLP)? (Choose three.)
medium- A.Automatically classify and label data
- ✓ B.Detect sensitive information in documents and emails
- ✓ C.Block sharing of sensitive data with external users
- D.Manage encryption keys for data at rest
- ✓ E.Provide policy tips to users when they attempt to share sensitive data
Why B: Microsoft Purview DLP is designed to detect sensitive information (e.g., credit card numbers, PII) in documents and emails by using built-in or custom sensitive information types. When a match is found, DLP can enforce policies to block sharing with external users and display policy tips to inform users of the violation, making options B, C, and E correct capabilities.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.