SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Your organization uses Microsoft Purview to govern data in Azure Data Lake Storage. You need to create a data classification policy that automatically tags files containing personally identifiable information (PII) such as social security numbers. Which scanning solution should you use?
⚠ Common exam trap
Many exam-takers confuse Microsoft Purview Information Protection (which applies labels to documents) with the scanning and classification capabilities of Purview Data Map, leading them to choose option A incorrectly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Data Map scanning
Microsoft Purview Data Map scanning is the correct solution because it provides automated scanning and classification of data assets across Azure Data Lake Storage and other sources. It uses built-in classifiers to detect sensitive data types like social security numbers and applies the classification labels directly to the files, enabling governance and policy enforcement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Purview Information Protection
Why it's wrong here
Microsoft Purview Information Protection (MIP) primarily focuses on applying sensitivity labels and protection actions (like encryption or access restrictions) to data *after* it has been identified or classified. While MIP labels represent classifications, the core function of automatically scanning diverse data sources to discover and apply these classifications based on content inspection is performed by other Purview components, not MIP directly. MIP consumes the classification output, it doesn't generate it through scanning.
- ✗
Microsoft Purview Data Loss Prevention (DLP)
Why it's wrong here
Microsoft Purview Data Loss Prevention (DLP) is designed to identify, monitor, and protect sensitive information across various locations to prevent its unauthorized sharing or exfiltration. DLP policies enforce rules based on existing classifications or content matches to block or audit actions. However, DLP's primary function is policy enforcement and protection against data loss, not the initial automated scanning of data sources to discover and classify sensitive data for governance purposes.
- ✗
Microsoft Purview Audit
Why it's wrong here
Microsoft Purview Audit provides a unified logging solution to record user and admin activities across Microsoft 365 services, enabling forensic investigations and compliance reviews. It tracks *who* did *what* and *when*, generating audit trails of events. However, Purview Audit does not perform the active scanning of data content within data sources to identify sensitive information and automatically apply classifications; its role is purely logging and monitoring activities.
- ✓
Microsoft Purview Data Map scanning
Why this is correct
Microsoft Purview Data Map scanning is the foundational capability responsible for automatically discovering, cataloging, and classifying data across an organization's entire data estate, including on-premises, multi-cloud, and SaaS sources. It uses built-in and custom classification rules, sensitive information types, and machine learning to identify sensitive data patterns and apply appropriate labels or classifications, populating the Data Map with metadata for governance. This process is central to understanding and managing data risk.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Labels
Labels are descriptive text or tags attached to IT resources to organize, identify, and manage them based on attributes like purpose, environment, or owner.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.