Microsoft Purview DLP: Automatically Classify and Protect Credit Card Numbers and More
You are a security administrator for a company that uses Microsoft 365. The compliance team needs to automatically classify and protect sensitive data such as credit card numbers in emails and documents. Which Microsoft Purview solution should you recommend?
Quick Answer
The answer is Microsoft Purview Data Loss Prevention (DLP). This solution is correct because it uses policies to automatically detect and protect sensitive data like credit card numbers in emails and documents, applying actions such as blocking or warning users in real time. While Microsoft Purview Information Protection handles classification and labeling, DLP is the enforcement engine that actively prevents data leaks. On the SC-900 exam, this distinction is a common trap—test takers often confuse Information Protection’s labeling with DLP’s protective actions. Insider Risk Management focuses on user behavior patterns, not data classification, and Records Management governs retention, not real-time protection. A helpful memory tip: think of DLP as the “guard” that stops data from leaving, while Information Protection is the “labeler” that tags it.
⚠ Common exam trap
The trap is that candidates may confuse Microsoft Purview Data Loss Prevention (DLP) with Information Protection. DLP enforces policies to prevent data loss but does not automatically classify data; Information Protection handles the actual labeling and classification. The question explicitly requires both classification and protection, making Information Protection the correct choice.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Information Protection
A is correct because Microsoft Purview Information Protection (formerly Azure Information Protection) provides automatic classification of sensitive data, such as credit card numbers, by applying sensitivity labels based on rules and patterns. It also offers protection through encryption or access restrictions. This solution directly addresses the compliance team's requirement for both automatic classification and protection. Data Loss Prevention (DLP) enforces protective actions after classification but does not perform the classification itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Purview Information Protection
Why this is correct
Correct. Microsoft Purview Information Protection automatically classifies sensitive data (e.g., credit card numbers) by applying sensitivity labels and can protect data with encryption or access controls, meeting both requirements.
- ✗
Microsoft Purview Records Management
Why it's wrong here
Incorrect. Microsoft Purview Records Management focuses on retention and disposition of records, not automatic classification and protection of sensitive data.
- ✗
Microsoft Purview Insider Risk Management
Why it's wrong here
Incorrect. Microsoft Purview Insider Risk Management analyzes user activities to detect risky behavior, but does not automatically classify or protect data.
- ✗
Microsoft Purview Data Loss Prevention
Why it's wrong here
Incorrect. Microsoft Purview Data Loss Prevention enforces policies to prevent data loss (e.g., blocking emails), but it does not perform automatic classification; it relies on pre-existing labels from Information Protection.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on SC-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A security administrator needs to enforce that all Microsoft 365 documents containing credit card numbers are automatically encrypted before being shared externally. Which Microsoft Purview solution should they use?
medium- A.Microsoft Purview Audit
- B.Microsoft Purview Communication Compliance
- ✓ C.Microsoft Purview Data Loss Prevention
- D.Microsoft Purview Information Protection
Why C: Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it can automatically detect sensitive data types, such as credit card numbers, in Microsoft 365 documents and enforce protective actions like encryption before external sharing. DLP policies use sensitive information types (e.g., Credit Card Number) and conditions to trigger encryption via Azure Information Protection, ensuring data is protected at rest and in transit.
Variation 2. Your organization is adopting Microsoft 365 Copilot for enterprise users. Which Microsoft Purview capability should you configure to prevent sensitive data from being inadvertently shared during Copilot interactions?
medium- A.Customer Lockbox
- ✓ B.Data Loss Prevention (DLP) policies
- C.Sensitivity labels
- D.eDiscovery
Why B: Data Loss Prevention (DLP) policies are the correct Microsoft Purview capability to prevent sensitive data from being inadvertently shared during Copilot interactions. DLP policies can inspect content in real time, including Copilot prompts and responses, and apply actions such as blocking or warning when sensitive information types (e.g., credit card numbers, social security numbers) are detected. This directly addresses the requirement to prevent inadvertent sharing of sensitive data within the Copilot environment.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.