SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your organization needs to monitor Microsoft Teams chats for inappropriate language and alert compliance officers. Which Microsoft Purview solution should you implement?
⚠ Common exam trap
Many exam-takers confuse Communication Compliance with eDiscovery or Auditing, assuming any monitoring or alerting feature falls under those broader categories, but Communication Compliance is the only solution that specifically analyzes message content for policy violations like inappropriate language.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Communication Compliance
Communication Compliance is the correct solution because it is specifically designed to detect inappropriate language, such as profanity, harassment, or sensitive content, in Microsoft Teams chats and other communication channels. It uses built-in trainable classifiers and customizable policies to automatically flag violations and alert compliance officers, enabling proactive remediation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Communication Compliance
Why this is correct
Microsoft 365 Communication Compliance is specifically designed to proactively detect, investigate, and remediate policy violations within an organization's communications, including Microsoft Teams chats. It leverages machine learning to identify sensitive information, regulatory compliance issues, or inappropriate conduct based on customizable policies. This tool enables organizations to monitor ongoing conversations for potential risks and take corrective actions before they escalate.
- ✗
eDiscovery
Why it's wrong here
eDiscovery (Electronic Discovery) in Microsoft 365 is a reactive process primarily used for legal or investigative purposes, allowing organizations to search, preserve, collect, and export electronically stored information (ESI) *after* a specific event has occurred. It is not designed for proactive, real-time monitoring of ongoing communications for policy violations or inappropriate content. Instead, it serves as a tool for post-incident data retrieval and review.
- ✗
Auditing
Why it's wrong here
Microsoft 365 Auditing focuses on recording user and administrator activities and system events across various services, including Microsoft Teams. While it provides a detailed log of *who* performed *what* action and *when*, it does not perform content analysis or proactively scan the *content* of communications for policy adherence or sensitive data. Its primary function is to provide an immutable record of events for security and compliance investigations.
- ✗
Information Protection
Why it's wrong here
Microsoft Information Protection (MIP) is a framework designed to classify, label, and protect sensitive data across its lifecycle, whether at rest, in use, or in transit. While it helps prevent the unauthorized sharing of sensitive content through sensitivity labels and data loss prevention (DLP) policies, it does not proactively monitor the *content* of ongoing communications like Teams chats for policy violations or inappropriate conduct. Its focus is on data classification and protection, not communication content analysis.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Communication Compliance
Communication Compliance is the set of policies, tools, and practices used by organizations to monitor, capture, and review electronic communications in order to meet regulatory, legal, and internal governance requirements.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.