Describe the concepts of security, compliance, and identity →mediumMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the concepts of security, compliance, and identity

Exhibit

Refer to the exhibit.

```json
{
  "properties": {
    "contentType": {
      "id": "0x010100B0C6F9B7D9F14F4A9A3B0C6F9B7D9F14"
    },
    "title": "Confidential Document",
    "labels": [
      {
        "name": "Confidential",
        "action": "encrypt",
        "protection": {
          "type": "user",
          "value": "finance@contoso.com"
        }
      }
    ]
  }
}
```

You find a JSON representation of a sensitivity label in a SharePoint document's metadata. The label indicates encryption is applied and access is restricted to finance@contoso.com. Based on this information, what is the effect of the label applied to the document?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The document is encrypted and can only be accessed by users in the finance@contoso.com group

A sensitivity label configured with encryption settings restricts access to the specified user or group. In this scenario, the label 'Confidential' is applied with encryption and the user/group set to 'finance@contoso.com', which encrypts the document and limits access to members of that group. Option B is incorrect because the label includes encryption, not just visual marking. Option C is incorrect because access is restricted to the finance group, not any user with the decryption key. Option D is incorrect because the label enforces encryption, not retention.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
The document is encrypted and can only be accessed by users in the finance@contoso.com group
Why this is correct
The JSON metadata explicitly indicates an 'encrypt' action, confirming that the document's content is protected through encryption. Furthermore, the `protection_type` is set to 'user' with the specific `value` 'finance@contoso.com'. This configuration ensures that only members of the `finance@contoso.com` security group possess the necessary rights to decrypt and access the document, thereby enforcing strict access control.
✗
The document is only marked as confidential but not encrypted
Why it's wrong here
This statement is incorrect because the JSON metadata clearly specifies an 'encrypt' action, which directly applies encryption to the document's content. While the document might also be visually marked as confidential through a sensitivity label or header/footer, the presence of the `encrypt` action unequivocally confirms that robust data encryption is actively applied, not merely a classification.
✗
The document is encrypted and can be accessed by any user with the decryption key
Why it's wrong here
While the document is indeed encrypted, the assertion that any user with a decryption key can access it is incorrect. The JSON specifies a `protection_type` of 'user' with the `value` 'finance@contoso.com', indicating that access rights are explicitly granted only to members of that specific security group. This rights management configuration ensures that decryption is authorized solely for designated users, not universally for anyone possessing a generic key.
✗
The document will be retained for a specified period
Why it's wrong here
This statement is incorrect because the provided JSON metadata does not contain any fields or configurations related to document retention. For a document to be retained for a specified period, the metadata would typically include properties such as a `retention_label`, `retention_period`, or `retention_start_date`, none of which are present in this context.

Go deeper

SC-900 Practice Question: Describe the concepts of security, compliance, and identity

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question