SC-900 - Microsoft Security, Compliance, and Identity Fundamentals Microsoft Purview Information Protection Questions and Answers — Questions and Answers
Question 1: An organization wants to apply visual markings, such as a 'Confidential' watermark, to all documents containing employee social security numbers. They also need this protection to persist no matter where the document is stored or with whom it is shared. Which Microsoft Purview feature should be configured to meet this requirement?
- Communication Compliance policy
- Sensitivity label (Correct answer)
- eDiscovery case
- Data Loss Prevention (DLP) policy
Correct answer: Sensitivity label
Sensitivity labels in Microsoft Purview Information Protection are used to classify and protect data. They can be configured to apply persistent protection settings, including visual content markings like headers, footers, and watermarks, as well as encryption, that travel with the content.
Question 2: A company needs to implement a policy that actively prevents users from sending emails containing credit card numbers to recipients outside the organization. The policy should block the email from being sent and notify the user. Which Microsoft Purview solution is designed specifically for this purpose?
- Insider Risk Management
- Sensitivity Labels
- Data Lifecycle Management
- Data Loss Prevention (DLP) (Correct answer)
Correct answer: Data Loss Prevention (DLP)
Microsoft Purview Data Loss Prevention (DLP) policies are designed to identify, monitor, and automatically protect sensitive information across Microsoft 365 services. A DLP policy can be configured to detect specific sensitive information types, like credit card numbers, and enforce actions such as blocking the sharing of that information with external users.
Question 3: Which of the following is a primary capability of Microsoft Purview sensitivity labels?
- Monitoring communications for offensive language
- Applying encryption and access restrictions to files and emails (Correct answer)
- Placing a legal hold on mailboxes for litigation purposes
- Automatically deleting old data based on its age
Correct answer: Applying encryption and access restrictions to files and emails
A core function of sensitivity labels is to apply protection settings, which include encryption to restrict access to authorized users and control the actions they can take (like forwarding or printing). This protection is persistent and stays with the data.
Question 4: A law firm wants to automatically classify and apply a 'Highly Confidential - Attorney-Client Privilege' label to any Word document that contains specific legal case numbers and keywords. Which Microsoft Purview Information Protection feature enables this automatic classification?
- Content Explorer
- Manual Labeling
- Auto-labeling policies (Correct answer)
- Activity Explorer
Correct answer: Auto-labeling policies
Auto-labeling policies in Microsoft Purview Information Protection allow administrators to create rules that automatically apply a sensitivity label to content (files and emails) when specific conditions are met, such as the presence of sensitive information types, keywords, or trainable classifiers.
Question 5: When a sensitivity label configured with encryption is applied to a document, what ensures that the protection remains with the file even if it is moved to a USB drive or sent to an external partner?
- The file's NTFS permissions
- A SharePoint container policy
- The metadata and protection policy embedded within the file itself (Correct answer)
- A network firewall rule
Correct answer: The metadata and protection policy embedded within the file itself
Sensitivity labels embed the classification and protection policy as metadata within the file. This means the encryption and access rights are part of the file itself and travel with it, ensuring the protection is persistent regardless of its location. This is managed by the Azure Rights Management service.
Question 6: An administrator is configuring a sensitivity label named 'Internal Only'. A requirement is to prevent users from printing any document to which this label is applied. Which setting within the sensitivity label configuration should the administrator use to enforce this?
- Content marking
- Auto-labeling for files and emails
- Access control (Encryption) (Correct answer)
- Scope
Correct answer: Access control (Encryption)
The ability to restrict actions like printing, copying, or forwarding is configured within the encryption settings of a sensitivity label. By configuring the access control settings and assigning specific usage rights (permissions) to users or groups, an administrator can explicitly deny the 'Print' right.
SC-900 - Microsoft Security, Compliance, and Identity Fundamentals Microsoft Purview Information Protection Questions and Answers
An organization wants to apply visual markings, such as a 'Confidential' watermark, to all documents containing employee social security numbers.
They also need this protection to persist no matter where the document is stored or with whom it is shared.
Which Microsoft Purview feature should be configured to meet this requirement?