SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Detect and block malware

  Why it's wrong here

  Detecting and blocking malware is primarily a function of Microsoft Defender for Office 365, which is part of the broader Microsoft 365 Defender suite. Microsoft Purview, conversely, focuses on data governance, compliance, and risk management, including data loss prevention and information protection, rather than real-time threat protection against malicious software or phishing attacks.

• ✗

  Apply sensitivity labels

  Why it's wrong here

  While Microsoft Purview provides the framework for managing and enforcing policies related to sensitivity labels, the actual application of these labels to data is a core capability of Microsoft Information Protection (MIP). MIP tools, integrated within the Purview compliance portal, enable users or automated processes to classify and protect sensitive data, but Purview's feature set is more about policy enforcement and data governance rather than the direct application mechanism itself.

• ✗

  Manage user access rights

  Why it's wrong here

  Managing user access rights, including provisioning, deprovisioning, and reviewing permissions, is a core function of Microsoft Entra ID Governance (formerly Azure AD Identity Governance). Microsoft Purview's scope is centered on data governance, compliance, and risk management across an organization's data estate, not on the identity and access lifecycle management of users and their entitlements to resources.

• ✓

  Provide policy tips to users

  Why this is correct

  Microsoft Purview Data Loss Prevention (DLP) policies are designed to provide policy tips to users directly within applications like Outlook, Teams, and SharePoint. These contextual notifications appear when users are about to perform an action that violates a DLP policy, such as sharing sensitive data externally. This feature educates users in real-time, helping them understand compliance requirements and correct their behavior before a data leak occurs.

• ✓

  Monitor and prevent sharing of sensitive data

  Why this is correct

  A fundamental feature of Microsoft Purview is its ability to monitor and prevent the unauthorized sharing of sensitive data through Data Loss Prevention (DLP) policies. Purview DLP scans content across various Microsoft 365 services and endpoints, identifies sensitive information types, and enforces rules to block, warn, or encrypt data sharing actions that violate organizational compliance policies, thereby safeguarding critical information from exfiltration.

Go deeper

Related to this question