Describe the concepts of security, compliance, and identity →hardMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the concepts of security, compliance, and identity

Exhibit

{
  "SensitivityLabel": {
    "Name": "Confidential",
    "Protection": {
      "Encryption": {
        "Enabled": true,
        "ProtectionType": "UserDefined",
        "UserPermissions": [
          {
            "User": "user@contoso.com",
            "Rights": ["View", "Edit"]
          }
        ]
      }
    },
    "AutoLabeling": {
      "Rule": {
        "Condition": {
          "ContainsSensitiveInformation": ["Credit Card Number"]
        }
      }
    }
  }
}

Refer to the exhibit. You are configuring a sensitivity label in Microsoft Purview. The label is set to automatically apply when credit card numbers are detected. However, users report that the label is not being applied to documents containing credit card numbers. What is the most likely cause?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The label is not published to a label policy

The auto-labeling rule requires a condition, but the label may not be published to users. However, the exhibit shows no policy assignment. The most likely cause is that the label is not published to a label policy (option B). Option A is incorrect because encryption is configured. Option C is incorrect because the condition is valid. Option D is incorrect because user permissions are defined.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The encryption is misconfigured
Why it's wrong here
The encryption setting 'UserDefined' is a valid configuration within sensitivity labels, allowing users to specify custom permissions when applying the label. This flexibility means the encryption itself is not misconfigured in a way that would prevent the label from functioning or being applied. Therefore, the issue does not stem from an incorrect encryption setup, as 'UserDefined' is an intentional and functional option.
✓
The label is not published to a label policy
Why this is correct
A sensitivity label, once created and configured, must be explicitly published through a label policy to become active and available for users or automatic application. Without being included in a policy and assigned to specific users or groups, the label remains in a draft state and cannot be applied, either manually or automatically, to documents or emails. This publishing step is critical for the label's operational deployment and is the most common reason for a configured label not being applied.
✗
The auto-labeling condition is incorrect
Why it's wrong here
The auto-labeling condition 'ContainsSensitiveInformation' is a standard and valid predicate used in Microsoft Purview Information Protection. This condition typically leverages pre-defined or custom sensitive information types to detect specific content patterns within documents or emails. Therefore, the condition itself is correctly configured and would not be the reason preventing the label from being applied automatically, assuming the sensitive information types are properly defined and detected.
✗
The user permissions are missing
Why it's wrong here
While sensitivity labels can be configured with specific user permissions to control access to encrypted content, the presence or absence of these permissions is not a prerequisite for an auto-labeling policy to *apply* a label. The auto-labeling mechanism focuses on content analysis and policy matching to assign the label, independent of the access rights that label might subsequently enforce. Thus, missing user permissions within the label itself would not hinder its automatic application to content.

Go deeper

SC-900 Practice Question: Describe the concepts of security, compliance, and identity

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question