SC-900 - Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance Questions and Answers — Questions and Answers
Question 1: An organization wants to ensure that any Microsoft Office document containing a specific internal project code, "Project Titan," is automatically encrypted and has a "Confidential" watermark applied. Which Microsoft Purview feature should be configured to meet this requirement?
- Data Loss Prevention (DLP) policy
- Retention policy
- Sensitivity label (Correct answer)
- eDiscovery case
Correct answer: Sensitivity label
Sensitivity labels are used to classify and protect data. They can be configured to automatically apply protections like encryption and content markings (such as watermarks and headers) when specific conditions, like the presence of a keyword or sensitive information type, are met within a file or email.
Question 2: A financial services company is required by regulators to monitor employee communications in Microsoft Teams to detect potential insider trading or sharing of confidential client information. Which Microsoft Purview solution is specifically designed for this purpose?
- Information Barriers
- Communication Compliance (Correct answer)
- eDiscovery (Premium)
- Records Management
Correct answer: Communication Compliance
Microsoft Purview Communication Compliance is an insider risk solution that helps minimize communication risks by detecting, capturing, and acting on inappropriate messages. It uses policies to scan internal and external communications, including Microsoft Teams messages, for content that violates regulatory or business conduct standards.
Question 3: A company's legal department must identify and preserve all emails and documents related to a specific employee for the last two years due to pending litigation. The data must not be altered or deleted by the employee. Which Microsoft Purview solution should the legal team use to meet this requirement?
- Data Loss Prevention (DLP)
- Sensitivity Labels
- Communication Compliance
- eDiscovery (Premium) (Correct answer)
Correct answer: eDiscovery (Premium)
Microsoft Purview eDiscovery (Premium) is designed for legal and investigative scenarios. It allows authorized personnel to create cases, identify custodians (like the specified employee), search for relevant content, and place a legal hold on data locations to preserve the information in-place and prevent modification or deletion.
Question 4: An organization needs to ensure that all chat messages in Microsoft Teams are permanently deleted after 90 days to comply with its data minimization policy. Which Microsoft Purview feature should be used to automate this process?
- Retention policy (Correct answer)
- Sensitivity label
- eDiscovery hold
- Data Loss Prevention (DLP) policy
Correct answer: Retention policy
Retention policies are the core feature of Microsoft Purview Data Lifecycle Management used to manage the data lifecycle. A retention policy can be configured to automatically delete content, such as Teams chat messages, after a specified period.
Question 5: What is the primary purpose of a Microsoft Purview Data Loss Prevention (DLP) policy?
- To classify documents based on their content and apply encryption.
- To retain data for a specific period for legal compliance.
- To identify and prevent the accidental or inappropriate sharing of sensitive information. (Correct answer)
- To search for and collect data for legal investigations.
Correct answer: To identify and prevent the accidental or inappropriate sharing of sensitive information.
The core function of a Data Loss Prevention (DLP) policy is to identify sensitive information across locations like Microsoft 365 services and prevent it from being shared inappropriately or accidentally with unauthorized individuals. It acts on data in motion to block actions like sending an email with credit card numbers to an external recipient.
Question 6: Which of the following best describes the primary goal of the Data Lifecycle Management (formerly Information Governance) capabilities within Microsoft Purview?
- To assign access rights to users based on their job role.
- To block real-time attempts to exfiltrate sensitive data.
- To provide a visual map of an organization's data assets.
- To manage the lifecycle of data by retaining what is needed and deleting what is not. (Correct answer)
Correct answer: To manage the lifecycle of data by retaining what is needed and deleting what is not.
Microsoft Purview Data Lifecycle Management provides the tools and capabilities to govern an organization's data for compliance or regulatory requirements. This is achieved by using features like retention policies and retention labels to intelligently keep what's required and dispose of what is no longer needed.
SC-900 - Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance Questions and Answers
An organization wants to ensure that any Microsoft Office document containing a specific internal project code, "Project Titan," is automatically encrypted and has a "Confidential" watermark applied.
Which Microsoft Purview feature should be configured to meet this requirement?