SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Microsoft Purview Insider Risk Management

  Why it's wrong here

  Microsoft Purview Insider Risk Management is designed to identify, triage, and act on risky activities by users within an organization, such as data exfiltration or policy violations. While it helps mitigate the *risk* of sensitive data exposure by detecting behavioral patterns that might lead to it, it does not directly *protect* data by preventing its sharing or transfer at the point of action. Its role is more about post-incident analysis and proactive behavioral intervention rather than real-time data blocking.

• ✗

  Microsoft Purview Audit

  Why it's wrong here

  Microsoft Purview Audit provides a unified logging service that records user and admin activities across Microsoft 365 services. Its primary function is to enable forensic investigations, compliance reviews, and security monitoring by providing an immutable record of events. However, Audit does not actively intervene to prevent sensitive data from being shared or accessed inappropriately; it merely logs *that* an action occurred, making it a reactive tool for accountability rather than a proactive data protection mechanism.

• ✗

  Microsoft Purview eDiscovery

  Why it's wrong here

  Microsoft Purview eDiscovery tools are specifically engineered to search for, preserve, collect, and export electronic content for legal, regulatory, or internal investigations. This solution is crucial for litigation preparedness and compliance, allowing organizations to respond to legal holds and discovery requests efficiently. It does not, however, offer any capabilities to proactively prevent the unauthorized sharing or exfiltration of sensitive data, as its focus is on data retrieval and management for legal purposes.

• ✓

  Microsoft Purview Data Loss Prevention

  Why this is correct

  Microsoft Purview Data Loss Prevention (DLP) is a direct data protection solution that identifies, monitors, and automatically protects sensitive information across various locations, including endpoints, cloud apps, and services like Microsoft Teams. By defining policies based on sensitive information types, DLP can prevent the unauthorized sharing, transfer, or use of sensitive data, such as credit card numbers or health records, ensuring it remains within organizational boundaries and complies with regulations. It actively blocks or alerts on policy violations in real-time.

• ✓

  Microsoft Purview Communication Compliance

  Why this is correct

  Microsoft Purview Communication Compliance helps organizations detect, investigate, and remediate inappropriate content in communications, including harassment, threats, and the sharing of sensitive information. By applying policies to monitor internal and external communications across platforms like Microsoft Teams, it can identify messages containing sensitive data types or policy violations. While its primary focus is on conduct, it indirectly protects sensitive data by allowing for review and remediation of communications where such data might be inappropriately shared, thus preventing its wider exposure.

Go deeper

Related to this question