SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Your organization uses Microsoft Purview Information Protection to classify and protect documents. You have created a sensitivity label that applies encryption to documents marked as 'Confidential'. Users are able to apply the label manually. However, you need to ensure that all documents containing personally identifiable information (PII) are automatically labeled as 'Confidential' when they are saved to SharePoint Online. What should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an auto-labeling policy in Microsoft Purview that scans for PII sensitive info types and applies the 'Confidential' label.
Auto-labeling policies in Microsoft Purview can scan documents for sensitive info types (such as PII) and automatically apply the 'Confidential' label when they are saved to SharePoint Online. Option B is incorrect because configuring a default label for SharePoint libraries would apply to all documents, not just those containing PII, and it would not scan for specific content. Option C is incorrect because a DLP policy blocks sharing or other actions but does not apply sensitivity labels. Option D is incorrect because manual labeling does not meet the requirement for automatic labeling.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create an auto-labeling policy in Microsoft Purview that scans for PII sensitive info types and applies the 'Confidential' label.
Why this is correct
Auto-labeling policies can scan and apply labels automatically.
- ✗
Configure a default label for SharePoint libraries so that all documents are labeled 'Confidential'.
Why it's wrong here
This applies to new documents only, not existing ones.
- ✗
Create a Data Loss Prevention (DLP) policy that blocks sharing of PII.
Why it's wrong here
DLP does not apply labels.
- ✗
Train users to apply the 'Confidential' label manually when they create documents with PII.
Why it's wrong here
This is not automatic.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
Key term
Personally identifiable information
Personally identifiable information (PII) is any data that can be used to identify, contact, or locate a specific individual, either alone or when combined with other information.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.