Describe the capabilities of Microsoft compliance solutions →easyMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Your organization is implementing Microsoft Purview to manage sensitive data. You need to ensure that documents containing credit card numbers are automatically detected and protected. Which Microsoft Purview solution should you configure?

⚠ Common exam trap

A common mix-up: candidates confuse eDiscovery (Premium) with DLP because both involve content scanning, but eDiscovery focuses on search and hold for legal cases, not automated real-time protection of sensitive data.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Data Loss Prevention (DLP)

Data Loss Prevention (DLP) is the correct solution because it is specifically designed to automatically detect sensitive data, such as credit card numbers, using built-in sensitive information types (e.g., Credit Card Number) and apply protective actions like blocking sharing or encrypting the document. Microsoft Purview DLP policies can scan content at rest, in transit, and in use across Exchange, SharePoint, OneDrive, Teams, and endpoints, ensuring credit card numbers are identified and protected in real time.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
eDiscovery (Premium)
Why it's wrong here
Microsoft Purview eDiscovery (Premium) is a solution primarily used for managing legal holds, identifying, collecting, and analyzing electronically stored information (ESI) in response to legal or investigative requests. It provides advanced capabilities like custodian management, legal hold notifications, and review sets to streamline the discovery process. However, eDiscovery does not proactively scan content for sensitive information types or automatically apply protective actions to prevent data loss in real-time.
✓
Data Loss Prevention (DLP)
Why this is correct
Microsoft Purview Data Loss Prevention (DLP) policies are specifically designed to identify, monitor, and automatically protect sensitive information across various locations, including Microsoft 365 services, endpoints, and on-premises repositories. These policies leverage sensitive information types, trainable classifiers, and exact data match to detect content containing, for example, credit card numbers or health records. Upon detection, DLP can enforce actions such as blocking sharing, encrypting files, or notifying administrators to prevent unauthorized disclosure or exfiltration.
✗
Audit (Standard)
Why it's wrong here
Microsoft Purview Audit (Standard) provides a comprehensive record of user and administrator activities within Microsoft 365 services, capturing events like file access, mailbox operations, and policy changes. While essential for forensic investigations, compliance reviews, and understanding data usage patterns, Audit (Standard) is fundamentally a logging and reporting tool. It does not possess the capability to automatically scan content for sensitive information or enforce real-time protective measures to prevent data loss.
✗
Information Barriers
Why it's wrong here
Microsoft Purview Information Barriers are designed to prevent specific groups of users from communicating with each other, or to restrict communication to only certain groups, primarily to avoid conflicts of interest or comply with regulatory requirements. This feature establishes communication segmentation within an organization, for instance, between trading and research departments. However, Information Barriers do not scan content for sensitive data or apply automated protection actions based on the content itself.

Go deeper

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Why each option matters

Option-by-option breakdown

Related to this question