SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which TWO of the following are capabilities of Microsoft Purview that help organizations manage compliance? (Choose two.)
⚠ Common exam trap
Candidates often confuse security solutions (like Defender for Cloud or Intune) with compliance solutions, or mistake identity management (Entra ID) for data governance, when Purview specifically addresses data protection, risk, and lifecycle management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP)
Data Loss Prevention (DLP) (B) is a core Microsoft Purview capability that helps organizations manage compliance by detecting and preventing the sharing of sensitive information across Exchange Online, SharePoint, OneDrive, Teams, and endpoint devices using policy tips, rules, and sensitive information types. Insider Risk Management (D) is also a Microsoft Purview solution that helps manage compliance by identifying, investigating, and acting on risky user activities such as data theft, leaks, and security policy violations using machine learning and built-in templates. Microsoft Entra ID (A) is an identity and access management service, not a Purview compliance capability, so it does not belong. Microsoft Defender for Cloud (C) is a cloud security posture management and workload protection service, not a Purview compliance feature. Microsoft Intune (E) is a device and application management service, not a Microsoft Purview compliance capability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID
Why it's wrong here
Microsoft Entra ID is a comprehensive cloud-based identity and access management service that provides authentication, authorization, and single sign-on capabilities for users and applications. While it integrates with Microsoft Purview for user identification and permissions, Entra ID itself is not a data governance or compliance capability offered by Purview. Its primary function is managing digital identities and controlling access to resources, distinct from Purview's data-centric focus.
- ✓
Data Loss Prevention (DLP)
Why this is correct
Data Loss Prevention (DLP) is a core capability of Microsoft Purview, designed to identify, monitor, and protect sensitive information across various locations, including Microsoft 365 services, endpoints, and on-premises file shares. Purview DLP policies can automatically detect sensitive data types, such as credit card numbers or health records, and then apply protective actions like blocking sharing, encrypting files, or notifying administrators to prevent unauthorized exfiltration or accidental data leaks. This proactive protection is crucial for maintaining compliance and safeguarding organizational data.
- ✗
Microsoft Defender for Cloud
Why it's wrong here
Microsoft Defender for Cloud is a cloud security posture management (CSPM) and cloud workload protection platform (CWPP) that provides unified security management and advanced threat protection across hybrid and multi-cloud environments. Its focus is on identifying security misconfigurations, strengthening the security posture of cloud resources, and detecting threats to servers, containers, and databases. This distinct security operations function is separate from Microsoft Purview's data governance, compliance, and risk management suite.
- ✓
Insider Risk Management
Why this is correct
Insider Risk Management is a key capability within Microsoft Purview that helps organizations identify, analyze, and act on risky activities by users that could lead to data security incidents or data leakage. It intelligently correlates various signals, such as unusual data access patterns, suspicious downloads, or email forwarding, from Microsoft 365 and other sources. This allows security teams to detect potential insider threats, whether malicious or inadvertent, and take appropriate measures to mitigate risks to sensitive information.
- ✗
Microsoft Intune
Why it's wrong here
Microsoft Intune is a cloud-based unified endpoint management (UEM) solution that focuses on managing and securing devices and applications across an organization. It enables IT administrators to configure device policies, deploy applications, and enforce security settings on mobile devices, laptops, and virtual desktops. While Intune can help secure endpoints where data resides, it is fundamentally an endpoint and application management service, distinct from the data-centric compliance and governance capabilities offered by Microsoft Purview.
Go deeper
Related to this question
Learn chapter
Communication Compliance
Key term
Data Loss Prevention
Data Loss Prevention (DLP) is a set of tools and processes that help organizations stop sensitive information from being shared, leaked, or stolen, whether accidentally or on purpose.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
One of 1,279 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.