SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which THREE of the following are capabilities of Microsoft Purview Information Protection?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Auto-labeling for sensitive data
A, C, D are correct. Sensitivity labels, auto-labeling, and encryption are key capabilities of Microsoft Purview Information Protection. B (Communication monitoring) is a Communication Compliance capability. E (Retention policies) is Data Lifecycle Management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Auto-labeling for sensitive data
Why this is correct
Auto-labeling is a feature of Information Protection.
- ✗
Communication monitoring
Why it's wrong here
Communication monitoring is a capability of Communication Compliance, not Information Protection.
- ✓
Sensitivity labels
Why this is correct
Sensitivity labels are a core component of Information Protection.
- ✓
Encryption and rights protection
Why this is correct
Information Protection includes encryption.
- ✗
Retention policies
Why it's wrong here
Retention policies are part of Data Lifecycle Management, not Information Protection.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Information protection
Information protection refers to the policies, procedures, and technologies used to safeguard data from unauthorized access, disclosure, alteration, or destruction.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on SC-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO of the following are capabilities of Microsoft Purview Information Protection?
medium- A.Searching for content in eDiscovery
- B.Preventing data loss via policies
- C.Setting retention periods for content
- ✓ D.Applying sensitivity labels to documents and emails
- ✓ E.Encrypting content with Azure Rights Management
Why D: Microsoft Purview Information Protection (MIP) focuses on classifying, labeling, and protecting sensitive data. Applying sensitivity labels to documents and emails (Option D) is a core MIP capability, as labels enforce protection actions like encryption or visual markings. Encrypting content with Azure Rights Management (Option E) is the underlying technology that MIP uses to apply persistent protection, making it a direct capability of the solution.
Variation 2. A company must implement data classification labels in Microsoft Purview to protect sensitive information. Which TWO actions are required to create and publish a sensitivity label?
medium- A.Deploy the label using Microsoft Intune configuration profiles.
- B.Define the label scope to include SharePoint and OneDrive.
- ✓ C.Create the label in the Microsoft Purview compliance portal.
- ✓ D.Publish the label using a label policy.
- E.Configure auto-labeling rules in Microsoft 365 Defender.
Why C: Sensitivity labels are created in the Microsoft Purview compliance portal (formerly Microsoft 365 compliance center), which is the central management interface for defining classification and protection settings. Without creating the label in Purview, there is no label object to apply or publish. Once created, labels must then be published using a label policy to make them available to users and services for application.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.