SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Microsoft 365 compliance center

  Why it's wrong here

  The Microsoft 365 compliance center is primarily designed to manage compliance risks and data governance for data residing within Microsoft 365 services, such as Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams. It does not natively provide capabilities to scan, classify, or report on data stored in external data sources like Azure SQL Database for data privacy regulations.

• ✗

  Azure Information Protection

  Why it's wrong here

  Azure Information Protection (AIP) is a cloud-based solution focused on classifying, labeling, and protecting documents and emails. It applies persistent protection to files regardless of where they are stored or shared. However, AIP is not designed to directly scan, classify, or manage structured data within database systems like Azure SQL Database, which requires different mechanisms for data privacy.

• ✓

  Microsoft Purview Data Estate Insights

  Why this is correct

  Microsoft Purview Data Estate Insights provides a comprehensive, high-level view of an organization's entire data landscape, including data sources like Azure SQL. It offers pre-built reports and metrics that highlight data classification, sensitivity label distribution, data ownership, and glossary adherence across the data estate. This enables organizations to monitor and demonstrate compliance with data privacy regulations by understanding where sensitive data resides and how it's governed.

• ✓

  Data Classification in Azure SQL Database

  Why this is correct

  Azure SQL Database features a built-in Data Discovery & Classification capability that allows database administrators to identify, label, and classify sensitive data directly within the database columns. This native functionality helps meet data privacy requirements by providing granular visibility into sensitive information, enabling auditing of access to classified data, and facilitating compliance reporting without requiring external tools for the initial classification.

• ✓

  Microsoft Purview Data Map

  Why this is correct

  The Microsoft Purview Data Map serves as the foundational layer for data governance, automatically scanning and cataloging metadata from various data sources, including Azure SQL Databases. It uses system and custom classifiers to identify sensitive data types, apply sensitivity labels, and build a unified, searchable map of an organization's data. This capability is crucial for discovering and understanding where sensitive data resides to ensure compliance with data privacy regulations.

Go deeper

Related to this question