Describe the capabilities of Microsoft compliance solutions →hardMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

{
  "name": "GDPR-PII-Protection",
  "properties": {
    "labels": [
      {
        "name": "Highly Confidential",
        "sensitivity": "high",
        "protection": {
          "encryption": true,
          "marking": "Watermark: CONFIDENTIAL"
        },
        "autoLabeling": {
          "conditions": [
            {
              "sensitiveType": "EU_Deutschland_SocialSecurityNumber",
              "confidenceLevel": "high"
            }
          ],
          "behavior": "apply"
        }
      }
    ]
  }
}

Refer to the exhibit. A Microsoft Purview administrator imported this JSON policy for automatic sensitivity labeling. After deployment, users report that emails containing German social security numbers are not being automatically labeled. What is the most likely cause?

⚠ Common exam trap

It's easy for candidates to confuse the 'apply' action (used for static labeling in SharePoint/OneDrive) with the 'applyWithOverride' action required for email auto-labeling, assuming all auto-labeling uses the same action.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Auto-labeling for emails requires 'applyWithOverride' behavior, not 'apply'.

Microsoft Purview auto-labeling for emails requires the 'applyWithOverride' action to allow users to override the label, whereas 'apply' is used for static labeling in other scenarios like SharePoint. The JSON policy uses 'apply' without override, which prevents automatic labeling on emails, as email auto-labeling policies specifically need the 'applyWithOverride' behavior to function correctly.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The sensitive info type 'EU_Deutschland_SocialSecurityNumber' is not defined in the tenant.
Why it's wrong here
The sensitive information type 'EU_Deutschland_SocialSecurityNumber' is a standard, built-in sensitive information type provided by Microsoft Purview. These built-in types are universally available across all tenants and and do not require explicit definition or configuration by an administrator to be recognized. Therefore, the premise that it is not defined in the tenant is incorrect, as it's part of the default Purview classification capabilities.
✓
Auto-labeling for emails requires 'applyWithOverride' behavior, not 'apply'.
Why this is correct
For automatic sensitivity labeling of content in Exchange Online (emails), the `behavior` parameter in the auto-labeling policy must be set to `applyWithOverride`. The `apply` behavior is typically used for SharePoint and OneDrive content, where it applies the label without allowing users to change it. However, Exchange requires `applyWithOverride` to ensure the label is applied while still permitting users to manually modify or remove it if necessary, aligning with email workflow flexibility.
✗
The encryption setting prevents auto-labeling on emails.
Why it's wrong here
Encryption, when configured as part of a sensitivity label, is an *effect* of applying that label, not a prerequisite or a blocker for auto-labeling. Auto-labeling policies are designed to identify sensitive content and then apply the appropriate label, which may or may not include encryption settings. Therefore, the presence or absence of an encryption setting does not inherently prevent an auto-labeling policy from functioning and applying a label to emails.
✗
The label is not published to users.
Why it's wrong here
While publishing a sensitivity label to users is necessary for manual application of the label by end-users in their applications, it is not strictly required for server-side auto-labeling policies to function. Auto-labeling policies operate at the service level (e.g., Exchange Online, SharePoint Online) to automatically detect and apply labels based on defined conditions, independent of whether the label is visible or available for manual selection by individual users.

Go deeper

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question