SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which TWO of the following are Microsoft Purview compliance solutions?
⚠ Common exam trap
Many candidates confuse Microsoft Entra ID (identity) or Microsoft Intune (device management) as compliance solutions because they are part of the broader Microsoft security ecosystem, but the SC-900 exam specifically tests that Purview compliance solutions are limited to tools like DLP, eDiscovery, Information Protection, and Audit.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP)
Data Loss Prevention (DLP) is a Microsoft Purview compliance solution that helps organizations detect and prevent the accidental or intentional sharing of sensitive information, such as credit card numbers or personally identifiable information (PII), across email, SharePoint, OneDrive, and endpoints. eDiscovery is another Purview compliance solution that allows legal and compliance teams to search, hold, and export content from Microsoft 365 services for litigation or investigation purposes. Both are core capabilities within the Microsoft Purview compliance portal, distinct from identity, device management, or cloud security tools.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID
Why it's wrong here
Microsoft Entra ID (formerly Azure Active Directory) is a cloud-based identity and access management service. Its primary function is to manage user identities, authentication, and authorization for accessing resources, rather than providing data-centric compliance features like those found within Microsoft Purview. While identity is foundational to security, Entra ID itself is not a Purview compliance solution.
- ✓
Data Loss Prevention (DLP)
Why this is correct
Data Loss Prevention (DLP) is a core component of Microsoft Purview compliance solutions, designed to identify, monitor, and automatically protect sensitive information. DLP policies are applied across Microsoft 365 services, endpoints, and on-premises repositories to prevent the unauthorized sharing, transfer, or use of sensitive data. This capability is crucial for maintaining regulatory compliance and safeguarding organizational data.
- ✓
eDiscovery
Why this is correct
Microsoft Purview eDiscovery provides a comprehensive set of tools to identify, preserve, collect, process, review, and analyze electronically stored information (ESI) for legal or internal investigations. It enables organizations to efficiently respond to litigation, regulatory requests, or internal inquiries by managing the entire eDiscovery workflow within the compliance portal, ensuring legal hold and evidence gathering.
- ✗
Microsoft Intune
Why it's wrong here
Microsoft Intune is a cloud-based service focused on unified endpoint management (UEM), primarily for mobile device management (MDM) and mobile application management (MAM). It helps organizations manage and secure devices and applications, but it does not directly offer compliance capabilities like data classification, data loss prevention, or eDiscovery, which are central to Microsoft Purview's offerings.
- ✗
Microsoft Defender for Cloud
Why it's wrong here
Microsoft Defender for Cloud is a comprehensive cloud security posture management (CSPM) and cloud workload protection platform (CWPP) solution. It provides security recommendations, threat protection, and vulnerability management across hybrid and multi-cloud environments, focusing on infrastructure security. While it enhances overall security, it is distinct from the data-centric compliance and governance solutions offered by Microsoft Purview.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
DLP
Data Loss Prevention — security technology that detects and prevents unauthorised transmission of sensitive data outside an organisation.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.