SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Your organization uses Microsoft Purview Communication Compliance to detect potential harassment in Microsoft Teams messages. Which role is required to review and act on policy matches?
⚠ Common exam trap
It's easy for candidates to confuse the 'Communication Compliance analyst' role with the 'Communication Compliance admin' role, assuming the admin role includes review capabilities, but Microsoft deliberately separates configuration from review to enforce least-privilege access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Communication Compliance analyst
The Communication Compliance analyst role is specifically designed to review policy matches, investigate message details, and take remediation actions such as escalating or resolving alerts in Microsoft Purview Communication Compliance. This role has the necessary permissions to view and act on detected violations without the broader administrative privileges of a Compliance administrator.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Communication Compliance admin
Why it's wrong here
The Communication Compliance admin role is primarily responsible for the initial setup, configuration, and ongoing management of Communication Compliance policies within Microsoft Purview. They define the scope, conditions, and actions for policies, ensuring they align with organizational compliance requirements. However, their purview does not typically extend to the day-to-day review and remediation of specific policy matches or alerts generated by the system.
- ✓
Communication Compliance analyst
Why this is correct
The Communication Compliance analyst is the frontline role specifically designated for the daily review and investigation of policy matches and alerts generated by Microsoft Purview. They are responsible for assessing potential policy violations, collaborating with subject matter experts, and taking appropriate actions such as escalating, resolving, or marking items as benign. This role is central to the operational enforcement of communication compliance policies.
- ✗
Communication Compliance investigator
Why it's wrong here
The Communication Compliance investigator role is typically engaged for more advanced or sensitive cases that require deeper analysis beyond the initial review performed by an analyst. Investigators possess elevated permissions to conduct comprehensive eDiscovery searches, apply legal holds, and export data for external review or legal proceedings. They are not involved in the routine, initial triage of alerts but rather in the escalated, in-depth examination of specific incidents.
- ✗
Compliance administrator
Why it's wrong here
The Compliance administrator holds a broad, overarching role within Microsoft Purview, responsible for managing the organization's overall compliance posture across various solutions, including Information Protection, Data Lifecycle Management, and Insider Risk Management. While they define the strategic compliance framework and oversee policy implementation, this role does not typically involve the granular, operational task of reviewing individual communication compliance policy matches. Their focus is on the holistic compliance ecosystem rather than specific alert remediation.
Visual reference
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.