Describe the capabilities of Microsoft compliance solutions →hardMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

{
  "Labels": [
    {
      "Name": "Confidential-Finance",
      "Priority": 1,
      "Settings": {
        "Encryption": {
          "ProtectionType": "UserDefined",
          "RightsDefinitions": [
            {"Users": "All", "Rights": "ViewOnly"}
          ]
        },
        "Marking": {
          "Header": {
            "Alignment": "Left",
            "Text": "CONFIDENTIAL",
            "FontColor": "Red",
            "FontSize": 12
          }
        },
        "AutoLabeling": {
          "Rules": [
            {
              "Condition": {"SensitiveInfoType": "Credit Card Number"},
              "Behavior": "Apply"
            }
          ]
        }
      },
      "SubLabels": [
        {
          "Name": "Finance-Europe",
          "Priority": 2,
          "Settings": {
            "Encryption": {
              "ProtectionType": "Template",
              "TemplateId": "europe-finance-template"
            },
            "Marking": {
              "Watermark": {
                "Text": "EUROPE CONFIDENTIAL",
                "Layout": "Diagonal",
                "FontSize": 24
              }
            }
          }
        }
      ]
    }
  ]
}

Refer to the exhibit. A sensitivity label is configured as shown. A user applies the parent label to a document containing credit card numbers. What is the expected behavior?

⚠ Common exam trap

It's easy for candidates to assume applying a parent label automatically cascades its settings to or includes its sublabels, but in reality, sublabels are separate labels that must be explicitly chosen, and no inheritance or automatic application occurs between parent and sublabels.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The document gets the parent label's encryption (ViewOnly) and header, but no watermark

When a user manually applies a parent sensitivity label that has sublabels, only the parent label's settings (encryption and header) are applied. The sublabel's watermark is not applied because sublabels are separate entities that must be explicitly selected; they are not automatically inherited or triggered by applying the parent label. The encryption (ViewOnly) and header come from the parent label's configuration, while the watermark belongs to the sublabel and is not applied.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The document gets the parent label's header and the sublabel's encryption and watermark
Why it's wrong here
When a parent sensitivity label is manually applied, only the settings directly configured on that parent label are enforced. Sublabels are distinct labels within a hierarchical structure, and their specific encryption, watermark, or other content marking settings are not automatically inherited or applied to a document unless the user explicitly selects and applies that particular sublabel. Therefore, the document would not receive the sublabel's encryption or watermark.
✗
The document gets no protection because credit card numbers are only detected by auto-labeling
Why it's wrong here
This statement is incorrect because manual application of a sensitivity label directly enforces the protection settings configured on that specific label, such as encryption and content markings like headers. The detection of sensitive information, like credit card numbers, is a condition typically used for *automatic* labeling policies, not a prerequisite for protection when a label is applied manually by a user. Therefore, the document would still receive the parent label's configured protections.
✓
The document gets the parent label's encryption (ViewOnly) and header, but no watermark
Why this is correct
When a user manually applies a parent sensitivity label, the document inherits all the protection settings directly configured on that specific parent label. This includes the specified encryption (e.g., ViewOnly) and any content markings like a header. Since the parent label itself does not have a watermark configured, and sublabels are not automatically applied, the document will not receive a watermark, even if a sublabel has one.
✗
The document gets the parent label's encryption and header, and auto-labeling applies the sublabel
Why it's wrong here
Auto-labeling policies are designed to automatically apply a *specific* sensitivity label based on content conditions, not to automatically apply a *sublabel* when a parent label has been manually selected by a user. When a parent label is manually applied, auto-labeling is not invoked to then "upgrade" or modify the applied label to a sublabel. The user's manual selection dictates the label applied, and sublabels require explicit selection.

Go deeper

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question