SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your organization uses Microsoft Purview to classify data. You need to automatically apply a 'Confidential' label to documents that contain salary information. Which type of sensitivity label configuration should you use?
⚠ Common exam trap
Many candidates confuse auto-labeling with default labeling or mandatory labeling policies, as candidates may think a default label or a policy requiring user input can achieve automatic content-based labeling, but only auto-labeling with sensitive information types performs dynamic content scanning.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Auto-labeling with sensitive information types
Auto-labeling with sensitive information types allows Microsoft Purview to automatically apply a 'Confidential' label to documents containing salary information based on predefined patterns, such as employee salary data. This configuration uses content scanning to detect sensitive data (e.g., via built-in or custom sensitive information types) and applies the label without user intervention, meeting the requirement for automatic classification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Manual labeling
Why it's wrong here
Manual labeling requires end-users to actively select and apply a sensitivity label to a document or email. While it provides flexibility and user control, it inherently relies on human intervention and judgment, making it unsuitable for automatically classifying data at scale based on its content. This method does not leverage content analysis to detect specific data types and apply labels without user action.
- ✓
Auto-labeling with sensitive information types
Why this is correct
Auto-labeling policies in Microsoft Purview are designed to automatically detect specific content within documents and emails, such as financial data or personally identifiable information, by using sensitive information types (SITs). When a defined SIT or condition is met, the policy automatically applies the corresponding sensitivity label without requiring any user interaction. This method is ideal for consistent, content-based data classification across an organization.
- ✗
Default labeling for SharePoint libraries
Why it's wrong here
Default labeling for SharePoint libraries applies a pre-configured sensitivity label to all new documents uploaded or created within that specific library. This method ensures that all content originating from a particular location receives a baseline label, but it does not perform content inspection or classification based on the actual data contained within the documents. It's a location-based, not content-based, automatic application.
- ✗
Mandatory labeling policy
Why it's wrong here
A mandatory labeling policy enforces that users must apply a sensitivity label before they can save or send a document or email. While it ensures that no content remains unlabeled, it does not automatically determine the correct label based on content analysis. Instead, it prompts or forces the user to make a selection, which is a form of user-driven, rather than automated, classification based on content.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.