Describe the capabilities of Microsoft security solutions →hardMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Exhibit

Refer to the exhibit.

```json
{
  "properties": {
    "displayName": "Sensitive HR Data",
    "description": "Protects HR documents with high sensitivity",
    "labels": [
      {
        "name": "Highly Confidential",
        "color": "red",
        "sensitivity": 90
      }
    ],
    "parent": "c92e6f8b-f8b2-4b3c-8e6f-7a1b2c3d4e5f"
  }
}
```

Refer to the exhibit. You are creating a Microsoft Purview sensitivity label for HR data. The JSON shows a label configuration. What is the likely effect of setting the sensitivity value to 90?

⚠ Common exam trap

The SC-900 exam often tests the misconception that the sensitivity value directly controls encryption, retention, or auditing, when in fact it only determines label priority in a hierarchical classification scheme.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The label will be applied with higher priority than labels with lower sensitivity values

In Microsoft Purview, sensitivity labels are assigned an integer priority value (typically 0 to 100). A higher sensitivity value indicates a higher priority. When multiple labels are available, the label with the highest sensitivity value is applied by default or takes precedence in auto-labeling and policy conflicts. Setting the value to 90 ensures this HR label is prioritized over labels with lower values, such as 75 or 50.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The label automatically encrypts the document
Why it's wrong here
Sensitivity labels themselves do not inherently encrypt documents. Instead, encryption is a specific protection action that must be explicitly configured within the sensitivity label's policy settings. When a label is published and applied, it then enforces the configured protection actions, such as encryption with specific permissions, rather than the label being the encryption mechanism.
✗
The label triggers auditing for 90 days
Why it's wrong here
Sensitivity labels do not directly trigger or define the duration of auditing. Auditing in Microsoft Purview is a continuous, platform-level capability configured independently through audit policies within the Microsoft 365 compliance center. While applying or interacting with a sensitivity label generates audit events, the label itself does not initiate the auditing process or dictate a specific audit retention period like 90 days.
✗
The label sets a 90-day retention period
Why it's wrong here
Sensitivity labels are designed for data classification and protection, not for managing data retention periods. Data retention, including setting specific durations like 90 days, is handled by distinct Microsoft Purview retention labels. These retention labels are published and applied separately to govern how long content is kept or deleted, fulfilling compliance requirements independently of sensitivity classifications.
✓
The label will be applied with higher priority than labels with lower sensitivity values
Why this is correct
In Microsoft Purview, sensitivity labels are assigned a priority order, typically based on their sensitivity value. When multiple auto-labeling policies might apply different labels to the same content, the label with the higher sensitivity value (and thus higher priority) will be applied. This ensures that the most restrictive or appropriate classification and protection settings are consistently enforced.

Go deeper

SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question