SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your organization uses Microsoft Purview to manage data classification. You need to ensure that a specific Azure Blob Storage account is automatically classified for sensitivity labels. Which step is required?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Register the storage account in Microsoft Purview Data Map and configure scanning
Microsoft Purview Data Map scans Azure Blob Storage and can auto-classify files based on built-in or custom classifiers. Option B is wrong because creating a sensitivity label and publishing it does not automatically classify the storage account; you need to register and scan it. Option C is wrong because DLP policies do not classify storage accounts directly. Option D is wrong because 'enabling Microsoft Purview Information Protection for Azure' is not a required configuration step for automatic classification of a specific storage account; automatic classification relies on registering the storage account in Microsoft Purview Data Map and configuring a scan, then applying auto-labeling policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Register the storage account in Microsoft Purview Data Map and configure scanning
Why this is correct
Registering the storage account in the Purview Data Map and configuring scanning allows Purview to scan and automatically classify the data with sensitivity labels.
- ✗
Create a sensitivity label and publish it to all users
Why it's wrong here
Creating a sensitivity label and publishing it does not automatically classify the storage account; you need to register and scan it.
- ✗
Apply a DLP policy to the storage account
Why it's wrong here
Applying a DLP policy to the storage account does not classify the data; DLP policies enforce rules on classified data but do not perform classification.
- ✗
Enable Microsoft Purview Information Protection for Azure
Why it's wrong here
Enabling Information Protection for Azure is not a valid step; Information Protection is for Office 365, not Azure storage.
Quick reference
Azure Blob Storage Tier Comparison
| Tier | Storage Cost | Retrieval Cost | Latency | Use Case |
|---|---|---|---|---|
| Hot | Highest | Lowest | Immediate | Active data, frequent reads |
| Cool | Lower | Higher | Immediate | Data accessed < once / month |
| Cold | Lower still | Higher | Immediate | Data accessed < once / quarter |
| Archive | Lowest | Highest + rehydration delay | Hours | Long-term compliance retention |
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
Key term
Sensitivity label
A sensitivity label is a metadata tag applied to digital content that classifies the content's level of confidentiality and governs how it can be shared, protected, and accessed.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.