SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which TWO of the following are capabilities of Microsoft Purview Information Protection?
⚠ Common exam trap
Test-takers frequently confuse the broad 'Microsoft Purview' umbrella with its specific sub-solutions, mistakenly attributing eDiscovery, DLP, or retention capabilities to Information Protection when each is a distinct workload with separate functions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Applying sensitivity labels to documents and emails
Microsoft Purview Information Protection (MIP) focuses on classifying, labeling, and protecting sensitive data. Applying sensitivity labels to documents and emails (Option D) is a core MIP capability, as labels enforce protection actions like encryption or visual markings. Encrypting content with Azure Rights Management (Option E) is the underlying technology that MIP uses to apply persistent protection, making it a direct capability of the solution.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Searching for content in eDiscovery
Why it's wrong here
Searching for content in eDiscovery is a capability of Microsoft Purview eDiscovery, which is a distinct solution within the broader Microsoft Purview compliance suite. While eDiscovery tools are integrated under the Purview umbrella, the specific function of performing content searches for legal or investigative purposes is handled by the specialized eDiscovery components, not by the core information protection features often associated with the general term "Microsoft Purview."
- ✗
Preventing data loss via policies
Why it's wrong here
Preventing data loss via policies is the primary function of Microsoft Purview Data Loss Prevention (DLP), a dedicated solution within the Microsoft Purview compliance portfolio. DLP policies are designed to identify, monitor, and automatically protect sensitive information across various locations and applications, actively preventing its unauthorized sharing or exfiltration. This is distinct from the classification and protection capabilities offered by Purview Information Protection.
- ✗
Setting retention periods for content
Why it's wrong here
Setting retention periods for content is a core capability of Microsoft Purview Data Lifecycle Management (DLM), which utilizes retention labels and policies to govern how long data is kept and when it should be deleted. DLM ensures compliance with regulatory requirements and organizational policies by managing the entire lifecycle of data. This function is separate from the classification and protection mechanisms provided by Purview Information Protection.
- ✓
Applying sensitivity labels to documents and emails
Why this is correct
Applying sensitivity labels to documents and emails is a fundamental capability of Microsoft Purview Information Protection. These labels allow organizations to classify data based on its sensitivity level, such as 'Confidential' or 'Public,' and then automatically enforce corresponding protection actions. This includes visual markings, encryption, and access restrictions, ensuring consistent data governance and protection across various platforms and applications.
- ✓
Encrypting content with Azure Rights Management
Why this is correct
Encrypting content with Azure Rights Management is a key protection action enabled by Microsoft Purview Information Protection, frequently triggered by the application of sensitivity labels. Azure Rights Management (Azure RMS) provides persistent, file-level encryption and usage rights management, ensuring that only authorized individuals can access and interact with sensitive documents and emails. This capability is crucial for maintaining data confidentiality and controlling access, even when content is shared externally.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Labels
Labels are descriptive text or tags attached to IT resources to organize, identify, and manage them based on attributes like purpose, environment, or owner.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.