SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which TWO Microsoft Purview features allow you to monitor and manage data across hybrid environments (on-premises and cloud)?
⚠ Common exam trap
Test-takers frequently confuse Information Protection (which applies labels and encryption) with the broader Purview governance suite that includes Data Map and Insights for monitoring and managing hybrid data estates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Data Map
Microsoft Purview Data Map is correct because it provides a unified map of data assets across on-premises, multi-cloud, and SaaS sources, enabling automated scanning and classification of sensitive data. Microsoft Purview Data Estate Insights is correct because it offers monitoring and governance dashboards that track data movement, usage, and compliance posture across hybrid environments, giving administrators visibility into both on-premises and cloud data estates.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
eDiscovery
Why it's wrong here
Microsoft Purview eDiscovery is a reactive capability designed for identifying, preserving, collecting, reviewing, and producing electronically stored information (ESI) for legal or investigative purposes. While it involves searching content, its primary function is case-specific data discovery and response, not continuous, proactive monitoring of an entire data estate's health, usage, or compliance posture across diverse sources.
- ✗
Information Protection
Why it's wrong here
Microsoft Purview Information Protection focuses on classifying, labeling, and protecting sensitive data wherever it resides, applying encryption and access controls. While it helps identify sensitive information, its core function is data governance through protection mechanisms, rather than providing a holistic, continuous view or monitoring of the overall data estate's metadata, lineage, or operational status across hybrid environments.
- ✗
Communication Compliance
Why it's wrong here
Microsoft Purview Communication Compliance is specifically engineered to detect and remediate inappropriate conduct within an organization's internal and external communications, such as harassment, threats, or regulatory violations. It analyzes communication channels like Microsoft Teams, Exchange, and Yammer for policy breaches, but it does not provide insights into the broader data estate, its metadata, lineage, or overall governance posture of data assets.
- ✓
Microsoft Purview Data Map
Why this is correct
The Microsoft Purview Data Map is the foundational component that automatically discovers, classifies, and catalogs data across an organization's entire data estate, including multi-cloud, SaaS, and on-premises sources. By continuously scanning and ingesting metadata, it creates a unified, holistic view of data assets, their lineage, and relationships, which is essential for understanding and monitoring the data landscape's composition and changes.
- ✓
Microsoft Purview Data Estate Insights
Why this is correct
Microsoft Purview Data Estate Insights leverages the metadata from the Data Map to provide actionable reports and visualizations on the overall health, governance, and compliance posture of an organization's data estate. It offers dashboards to monitor key metrics such as data growth, sensitive data distribution, data ownership, and data stewardship, enabling proactive identification of risks and opportunities for improved data governance across hybrid environments.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.