SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which THREE are benefits of using Microsoft Purview Compliance Manager?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
View a compliance score that indicates your overall compliance posture.
Compliance Manager provides a compliance score to indicate your overall compliance posture (B), suggests improvement actions to achieve compliance (D), and allows you to assign compliance tasks to other users (C). Option A is incorrect because Data Loss Prevention policies are created in the Microsoft Purview compliance portal, not directly in Compliance Manager. Option E is incorrect because automatically applying sensitivity labels is done through auto-labeling policies, not Compliance Manager.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create Data Loss Prevention policies.
Why it's wrong here
Microsoft Purview Compliance Manager is a feature within the Microsoft Purview compliance portal designed to help manage and improve an organization's compliance posture. It does not, however, provide functionality for creating Data Loss Prevention (DLP) policies. DLP policies are configured and managed within the Data Loss Prevention solution, which is a separate but integrated capability within the Microsoft Purview compliance portal, focusing on preventing sensitive data exfiltration.
- ✓
View a compliance score that indicates your overall compliance posture.
Why this is correct
A core benefit of Microsoft Purview Compliance Manager is its ability to provide a quantifiable compliance score, which serves as a real-time indicator of an organization's overall compliance posture against various regulations and standards. This score is dynamically calculated based on the implementation status of recommended actions and controls, allowing organizations to quickly assess their progress and identify areas needing improvement. It provides a clear, measurable metric for tracking compliance efforts over time.
- ✓
Assign compliance tasks to other users in your organization.
Why this is correct
Microsoft Purview Compliance Manager facilitates collaborative compliance efforts by enabling users to assign specific improvement actions as tasks to other individuals or teams within the organization. This functionality ensures accountability and streamlines the implementation of necessary controls, as each assigned task includes details about the action, its associated regulation, and a due date. It helps track progress and ensures that responsibilities for compliance activities are clearly delegated and managed.
- ✓
Receive recommendations for improvement actions to achieve compliance.
Why this is correct
A significant advantage of Microsoft Purview Compliance Manager is its provision of actionable recommendations, known as improvement actions, tailored to help organizations meet specific regulatory requirements and industry standards. These recommendations are derived from a comprehensive library of controls mapped to various regulations, guiding users on specific steps to implement technical and organizational controls. Successfully implementing these actions directly contributes to increasing the organization's compliance score and strengthening its overall posture.
- ✗
Automatically apply sensitivity labels to documents.
Why it's wrong here
While Microsoft Purview offers robust information protection capabilities, including sensitivity labels, the Compliance Manager specifically focuses on managing and assessing an organization's compliance posture. Automatically applying sensitivity labels to documents and emails is a function of Microsoft Purview Information Protection, specifically through auto-labeling policies configured in the Microsoft Purview compliance portal, separate from the Compliance Manager's core functions. Compliance Manager helps track the implementation of controls related to information protection, but does not perform the auto-labeling itself.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.