SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your organization uses Microsoft Purview Information Barriers to prevent certain user groups from communicating with each other. You need to test the configuration before fully enforcing it. What should you do?
⚠ Common exam trap
Many exam-takers confuse prerequisite configuration steps (like defining segments or enabling audit logging) with the actual testing mechanism, or assume that Compliance Manager can validate Information Barrier policies when it is designed for broader compliance posture assessment.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Run the Information Barriers policy in test mode
Microsoft Purview Information Barriers include a dedicated test mode that allows administrators to validate policy behavior against user segments before enforcement. Running the policy in test mode evaluates whether communications between specified segments are correctly blocked or allowed, without actually preventing messages, enabling safe validation of the configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Run the Information Barriers policy in test mode
Why this is correct
Running an Information Barriers policy in test mode is the correct approach because it simulates the policy's enforcement without actually blocking any communications. This mode generates a detailed report outlining which users and communications would be affected by the policy, allowing administrators to review potential impacts, identify unintended restrictions, and refine the policy configuration before full activation. It provides a safe, non-disruptive method to validate the policy's effectiveness and accuracy against the organization's requirements.
- ✗
Define user segments in the Microsoft Purview compliance portal
Why it's wrong here
Defining user segments in the Microsoft Purview compliance portal is a foundational prerequisite for creating Information Barriers policies, not a method for testing their operational impact. Segments categorize users based on specific attributes, forming the groups between which communication restrictions will be applied. While essential for policy construction, this action itself does not simulate or validate how a policy would function once applied, nor does it provide insights into potential communication blocks.
- ✗
Enable audit logging and then run the policy application
Why it's wrong here
Enabling audit logging and then running the policy application would record events as they happen, but it does not provide a safe, pre-enforcement test of the policy's impact. If the policy is run in enforcement mode, audit logs would capture actual communication blocks, potentially disrupting business operations. If the policy is not enforced, audit logs would show no blocks, providing no insight into the policy's intended restrictions without affecting user communications.
- ✗
Use the Compliance Manager assessment for Information Barriers
Why it's wrong here
Using the Compliance Manager assessment for Information Barriers focuses on evaluating an organization's compliance posture against various regulations and standards, rather than testing the real-time functionality of a specific policy. Compliance Manager provides a framework for managing compliance, offering recommended actions and scoring based on control implementation. It does not execute or simulate the operational behavior of an Information Barriers policy to determine its effectiveness in blocking communications.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.