Courseiva

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Which TWO of the following are capabilities of Microsoft Purview Communication Compliance? (Select TWO.)

⚠ Common exam trap

A common mix-up: candidates confuse Communication Compliance with Data Loss Prevention (DLP) or Information Protection, since all three involve content scanning—but Communication Compliance is specifically for monitoring and reviewing communications for policy violations, not for automatic labeling or blocking sensitive data.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Enforce company policies on communication channels

Microsoft Purview Communication Compliance allows organizations to enforce company policies on communication channels such as email, Microsoft Teams, and third-party platforms. It does this by scanning communications for policy violations (e.g., insider trading, harassment) and enabling designated reviewers to take remediation actions like escalating or archiving messages.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Enforce company policies on communication channels

    Why this is correct

    Microsoft Purview Communication Compliance is specifically designed to help organizations detect, investigate, and remediate policy violations in internal and external communications. This capability allows administrators to define policies that automatically scan communication channels, such as Microsoft Teams, Exchange email, and Yammer, for content that violates company standards, regulatory requirements, or ethical guidelines, thereby enforcing appropriate conduct and preventing risks.

  • Detect offensive language in emails and Teams messages

    Why this is correct

    A key feature of Microsoft Purview Communication Compliance is its ability to proactively identify and flag inappropriate content, including offensive language, harassment, or threats, across various communication platforms like emails and Microsoft Teams. Utilizing machine learning and predefined or custom dictionaries, this solution automatically scans messages, attachments, and other content, alerting compliance officers to potential policy breaches and enabling timely intervention to maintain a respectful and compliant workplace environment.

  • Automatically apply sensitivity labels to documents

    Why it's wrong here

    While a critical component of data governance within the broader Microsoft Purview ecosystem, the automatic application of sensitivity labels to documents is a primary capability of Microsoft Purview Information Protection (MPIP). MPIP focuses on classifying and protecting sensitive data throughout its lifecycle, using policies to automatically apply labels based on content inspection, rather than being a direct function of the communication monitoring services typically associated with the correct answers.

  • Prevent sharing of credit card numbers via email

    Why it's wrong here

    Preventing the unauthorized sharing of sensitive data, such as credit card numbers, via email or other channels is a core function of Microsoft Purview Data Loss Prevention (DLP). DLP policies are specifically configured to identify, monitor, and block the transmission of sensitive information, ensuring it does not leave the organization's control or violate regulatory compliance, making it distinct from the communication policy enforcement capabilities.

  • Place legal holds on user mailboxes

    Why it's wrong here

    Placing legal holds on user mailboxes is a specialized function performed by Microsoft Purview eDiscovery solutions. These tools are designed to preserve, collect, analyze, and produce electronic information for legal or investigative purposes, ensuring that relevant data cannot be altered or deleted. This capability is distinct from the proactive communication monitoring and policy enforcement provided by Communication Compliance.

About these practice questions

This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.