SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Information Protection

  Why this is correct

  Microsoft Purview Information Protection (MPIP) is a core solution for data classification, enabling organizations to define, apply, and manage sensitivity labels across various data types and locations. These labels classify data based on its sensitivity level, which then dictates subsequent protection actions such as encryption, access restrictions, and visual markings. MPIP provides the essential framework for identifying and categorizing sensitive information, making it fundamental to any data classification strategy.

• ✗

  Insider Risk Management

  Why it's wrong here

  Microsoft Purview Insider Risk Management focuses on identifying, investigating, and acting on potentially malicious or inadvertent risky activities by users within an organization. While it may leverage existing data classifications to understand the context of user actions (e.g., accessing highly sensitive data), its primary function is behavioral analytics and risk mitigation, not the initial classification of data itself. It does not provide tools for defining or applying sensitivity or retention labels to content.

• ✓

  Data Lifecycle Management

  Why this is correct

  Microsoft Purview Data Lifecycle Management (formerly Microsoft 365 Records Management) utilizes retention labels, which are a specific form of classification, to govern how long data is kept or deleted. These labels classify data based on regulatory, legal, or business requirements, ensuring compliance throughout its lifecycle. By applying these labels, organizations classify data for retention, deletion, or disposition, directly supporting a critical aspect of data classification related to its lifecycle governance.

• ✗

  Communication Compliance

  Why it's wrong here

  Microsoft Purview Communication Compliance is designed to help organizations detect, investigate, and remediate policy violations in communications, such as harassment, inappropriate content, or regulatory non-compliance. It analyzes messages and content for specific patterns or keywords defined in policies. While it monitors communications, it does not provide mechanisms to classify the underlying data itself with sensitivity or retention labels; rather, it acts on the content based on pre-defined policies.

• ✓

  Data Loss Prevention

  Why this is correct

  Microsoft Purview Data Loss Prevention (DLP) policies are instrumental in preventing sensitive information from being shared inappropriately or externally. DLP policies leverage sensitivity labels, which are a direct output of data classification, to identify and protect sensitive data. While DLP doesn't *perform* the initial classification itself, it *relies* heavily on and enforces policies based on the classification applied via sensitivity labels, thus directly supporting the protection aspect that follows classification by acting upon classified data to prevent its unauthorized egress.