SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Your company, Fabrikam, uses Microsoft 365 and has Microsoft Purview Information Protection deployed. You need to protect sensitive documents labeled as 'Confidential' so that they cannot be printed or copied when opened in Microsoft Word. You have created a sensitivity label with the appropriate encryption settings. However, users report that they can still print and copy content from these documents. You verify that the label is published and assigned to the correct users. What should you configure to enforce the protection?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the sensitivity label to apply an Azure Rights Management template that restricts printing and copying
The sensitivity label must be configured with an Azure Rights Management (RMS) template that specifies user rights, such as denying printing and copying. The label's encryption settings allow applying an RMS template that restricts these actions. Option B is incorrect because conditional access policies control access to resources, not usage rights within documents. Option C is incorrect because auto-labeling policies only automatically apply labels but do not enforce rights. Option D is incorrect because data loss prevention (DLP) policies can detect and block certain actions, but to prevent printing and copying within the document, rights management via RMS is required.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure the sensitivity label to apply an Azure Rights Management template that restricts printing and copying
Why this is correct
RMS templates define user permissions for protected content.
- ✗
Implement conditional access policies to block access from unmanaged devices
Why it's wrong here
Conditional access controls access, not usage rights within documents.
- ✗
Configure auto-labeling policies to apply the label automatically
Why it's wrong here
Auto-labeling applies labels but does not enforce usage rights.
- ✗
Create a data loss prevention policy that blocks printing and copying
Why it's wrong here
DLP policies do not enforce rights within documents; they monitor and block sharing.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Conditional access
Conditional access is a security framework that evaluates signals like user location, device health, and risk level to grant or block access to resources in real time.
Key term
Sensitivity label
A sensitivity label is a metadata tag applied to digital content that classifies the content's level of confidentiality and governs how it can be shared, protected, and accessed.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.