SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A company wants to monitor employee communications in Microsoft Teams and Exchange Online for potential policy violations such as harassment or inappropriate sharing of confidential information. They need a solution that allows them to define policies, review flagged messages, and manage investigations. Which Microsoft Purview solution should they use?
⚠ Common exam trap
Test-takers frequently confuse Communication Compliance with Insider Risk Management, as both deal with compliance and risk, but Insider Risk Management is focused on user behavior and data theft, not on monitoring communication content for policy violations like harassment or inappropriate sharing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Communication Compliance
Communication Compliance is the correct Microsoft Purview solution because it is specifically designed to monitor communications (e.g., emails in Exchange Online and messages in Microsoft Teams) for policy violations such as harassment or inappropriate sharing of confidential information. It allows administrators to define customizable policies, automatically flag messages that match sensitive information types or offensive language, and manage investigations through a built-in review workflow.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Communication Compliance
Why this is correct
Communication Compliance is the dedicated Microsoft Purview solution designed for proactively monitoring and reviewing employee communications across platforms like Microsoft Teams and Exchange. It enables organizations to create policies that detect potential violations, such as harassment, inappropriate content, or regulatory non-compliance, using machine learning and keyword matching. Designated reviewers can then investigate flagged messages, apply remediation actions, and ensure adherence to internal and external standards.
- ✗
Insider Risk Management
Why it's wrong here
Insider Risk Management is engineered to detect and act on risky activities by users that could lead to data theft, leaks, or other security incidents. It leverages machine learning to identify patterns of behavior, such as unusual data downloads or access to sensitive files, rather than directly monitoring the content of all employee communications for general policy violations. While it might flag communications related to a detected risk, its core function is behavioral analysis for data protection, not content compliance.
When this WOULD be correct
A company wants to detect and investigate potential data theft by employees who are downloading large amounts of data to personal devices or sharing sensitive files externally. Insider Risk Management would be the correct solution.
- ✗
Information Barriers
Why it's wrong here
Information Barriers are a preventative control designed to restrict communication and collaboration between specific groups of users within an organization, often to avoid conflicts of interest or comply with regulatory requirements. This solution focuses on who can communicate with whom, establishing virtual walls between user segments in applications like Teams and Exchange. It does not, however, involve monitoring, reviewing, or analyzing the content of communications for policy violations; it simply prevents the communication from occurring.
When this WOULD be correct
A company needs to restrict communication between two departments (e.g., trading and research) to prevent insider trading. Which Microsoft Purview solution should they use to enforce these restrictions?
- ✗
Audit (Standard or Premium)
Why it's wrong here
Microsoft Purview Audit (Standard or Premium) primarily provides a comprehensive log of user and administrator activities across Microsoft 365 services, including message sends or file accesses. While essential for forensic investigations and understanding who did what and when, it does not perform content analysis or offer built-in workflows for detecting policy violations within the content of communications. Its purpose is activity logging for post-incident analysis, not proactive content monitoring.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SC-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Communication ComplianceCorrect answer▾
Why this is correct
Communication Compliance is the dedicated Microsoft Purview solution designed for proactively monitoring and reviewing employee communications across platforms like Microsoft Teams and Exchange. It enables organizations to create policies that detect potential violations, such as harassment, inappropriate content, or regulatory non-compliance, using machine learning and keyword matching. Designated reviewers can then investigate flagged messages, apply remediation actions, and ensure adherence to internal and external standards.
✗Insider Risk ManagementWrong answer — click to see why▾
Why this is wrong here
Insider Risk Management focuses on detecting and investigating risky user activities (e.g., data theft, malicious insiders) based on analytics, not on monitoring communications for policy violations like harassment or confidential information sharing.
★ When this WOULD be the correct answer
A company wants to detect and investigate potential data theft by employees who are downloading large amounts of data to personal devices or sharing sensitive files externally. Insider Risk Management would be the correct solution.
Why candidates choose this
Candidates may confuse the two because both deal with internal policy violations and investigations, but Insider Risk Management is behavior-based, while Communication Compliance is content-based.
✗Information BarriersWrong answer — click to see why▾
Why this is wrong here
Information Barriers are used to prevent communication and collaboration between specific groups or users (e.g., to avoid conflicts of interest), not to monitor communications for policy violations or manage investigations.
★ When this WOULD be the correct answer
A company needs to restrict communication between two departments (e.g., trading and research) to prevent insider trading. Which Microsoft Purview solution should they use to enforce these restrictions?
Why candidates choose this
Candidates may confuse the concept of controlling communications (Information Barriers) with monitoring communications (Communication Compliance), as both involve communication policies.
Analysis generated from the official SC-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Exchange Online
Exchange Online is Microsoft's cloud-based email, calendar, and contact hosting service that is part of the Microsoft 365 suite, allowing organizations to manage corporate messaging without maintaining their own mail servers.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.