SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which TWO of the following are capabilities of Microsoft Purview Data Loss Prevention?
⚠ Common exam trap
Many exam-takers confuse DLP with other Microsoft Purview solutions: they may think DLP defines retention periods (Records Management), searches content (eDiscovery), or applies sensitivity labels (Information Protection), when in fact DLP focuses on preventing data loss through monitoring and blocking actions, not on lifecycle management or labeling.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Block sharing of sensitive data via email.
Microsoft Purview Data Loss Prevention (DLP) is designed to detect and prevent the accidental or intentional sharing of sensitive information. Option C is correct because DLP policies can block the sharing of sensitive data via email by inspecting content in transit and applying actions such as blocking the message. Option E is correct because DLP can display policy tips to users in real time, warning them before they share sensitive data and allowing them to override the block with justification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Define retention periods for documents.
Why it's wrong here
Defining retention periods for documents is a capability provided by specific solutions within the Microsoft Purview compliance suite, namely Microsoft Purview Data Lifecycle Management and Microsoft Purview Records Management. While these are part of the broader Purview ecosystem, the core Microsoft Purview Information Protection, which DLP is a part of, does not directly manage retention labels or policies. Its primary focus is on protecting data from unauthorized access and sharing, rather than governing its lifecycle.
- ✗
Search for content in Exchange Online mailboxes.
Why it's wrong here
Searching for content in Exchange Online mailboxes is a core function of Microsoft Purview eDiscovery, a distinct solution within the broader Microsoft Purview compliance portal. This capability is designed for legal and investigative purposes, allowing authorized personnel to identify, preserve, and collect electronically stored information. While eDiscovery is part of the Purview suite, it is not a direct capability of the Data Loss Prevention (DLP) component, which focuses on preventing data exfiltration.
- ✓
Block sharing of sensitive data via email.
Why this is correct
Microsoft Purview Data Loss Prevention (DLP) policies are specifically designed to identify and prevent the unauthorized sharing of sensitive information, including via email. These policies can detect specific sensitive information types, such as credit card numbers or national ID numbers, within email content or attachments. Upon detection, a configured DLP policy can automatically block the email from being sent, thereby preventing the exfiltration of critical data.
- ✗
Automatically apply sensitivity labels to content.
Why it's wrong here
Automatically applying sensitivity labels to content is a feature of Microsoft Purview Information Protection's auto-labeling capabilities, which can be configured for both client-side and service-side application. While sensitivity labels are integral to data protection, this specific automation is distinct from the primary function of Data Loss Prevention (DLP). DLP focuses on *preventing* specific actions with sensitive data, whereas auto-labeling focuses on *classifying* and *protecting* the data at rest and in use.
- ✓
Provide policy tips to users when they attempt to share sensitive data.
Why this is correct
Microsoft Purview Data Loss Prevention (DLP) policies can be configured to provide policy tips directly to users in applications like Outlook or SharePoint when they attempt to share sensitive data. These tips serve as real-time notifications, informing users that their action might violate a company's data protection policy. Depending on the policy configuration, users may be allowed to override the block by providing a business justification, promoting user education and responsible data handling.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
DLP
Data Loss Prevention — security technology that detects and prevents unauthorised transmission of sensitive data outside an organisation.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.