SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your company uses Microsoft Purview Communication Compliance to detect and remediate inappropriate messages. You need to create a policy that monitors Microsoft Teams chats for potential harassment. Which type of policy should you create?
⚠ Common exam trap
It's easy for candidates to confuse Communication Compliance with Data Loss Prevention (DLP), as both involve monitoring content, but DLP is focused on data protection (e.g., credit card numbers) while Communication Compliance targets behavioral policy violations like harassment.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Communication Compliance policy
Microsoft Purview Communication Compliance is specifically designed to detect and remediate inappropriate messages, such as harassment, in Microsoft Teams chats and other communication channels. It uses customizable policies to scan for offensive language, sensitive information, or policy violations, enabling organizations to enforce internal compliance rules.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data Loss Prevention (DLP) policy
Why it's wrong here
A Data Loss Prevention (DLP) policy is designed to identify, monitor, and protect sensitive information from being shared inappropriately, either internally or externally. Its primary function is to prevent data exfiltration of specific sensitive data types, such as credit card numbers or personally identifiable information (PII), by detecting patterns and enforcing rules. While crucial for data security, DLP does not monitor the general content of communications for inappropriate language or harassment, making it unsuitable for this specific requirement.
- ✗
Information Barriers policy
Why it's wrong here
An Information Barriers policy is implemented to prevent communication and collaboration between specific groups of users within an organization, often to avoid conflicts of interest or comply with regulatory requirements. These policies establish boundaries, ensuring that users in one segment cannot interact with users in another segment through designated Microsoft 365 services. However, Information Barriers are a preventative access control mechanism, not a tool for monitoring the content of messages for inappropriate behavior like harassment within allowed communication channels.
- ✓
Communication Compliance policy
Why this is correct
A Communication Compliance policy is specifically engineered within Microsoft Purview to detect, investigate, and remediate inappropriate messages across various Microsoft 365 communication channels, including Microsoft Teams, Exchange email, and Viva Engage. These policies leverage machine learning, keyword dictionaries, and trainable classifiers to identify content related to harassment, threats, sensitive information sharing, or regulatory violations. It provides a robust framework for organizations to proactively manage and mitigate communication risks, directly addressing the need to monitor for inappropriate messages.
- ✗
Retention policy
Why it's wrong here
A Retention policy defines how long content is kept or deleted across Microsoft 365 services, ensuring compliance with legal, regulatory, and organizational record-keeping requirements. Its purpose is to manage the lifecycle of data, either preserving it for a specified period or ensuring its timely deletion. While essential for data governance and compliance, a retention policy does not actively monitor or analyze the content of communications for inappropriate language or behavior, focusing instead on data longevity rather than message content.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Communication Compliance
Communication Compliance is the set of policies, tools, and practices used by organizations to monitor, capture, and review electronic communications in order to meet regulatory, legal, and internal governance requirements.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.