SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your organization uses Microsoft Purview to enforce data loss prevention (DLP) policies. You need to ensure that when a user attempts to share a document containing credit card numbers via email, the document is blocked and the user receives a policy tip. What should you configure in the DLP policy?
⚠ Common exam trap
Candidates often confuse 'Block' with 'Block with override', assuming any blocking action will automatically show a policy tip, but only 'Block with override' explicitly enables the user-facing tip and override capability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set the action to 'Block with override'
The requirement is to block the sharing of a document containing credit card numbers via email while also providing a policy tip to the user. In Microsoft Purview DLP, the 'Block with override' action blocks the sensitive data from being shared but allows the user to override the block (e.g., by providing a business justification), and it automatically triggers a policy tip to inform the user. This matches the scenario exactly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set the action to 'Audit only'
Why it's wrong here
Set the action to 'Audit only' [wrong]
- ✓
Set the action to 'Block with override'
Why this is correct
Set the action to 'Block with override' [CORRECT]
- ✗
Set the action to 'Block'
Why it's wrong here
Set the action to 'Block' [wrong]
- ✗
Set the action to 'Notify only'
Why it's wrong here
Set the action to 'Notify only' [wrong]
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.