SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Purview Information Protection 2 — Questions and Answers
Question 1: Which Microsoft Purview feature automatically discovers and classifies sensitive data across your Microsoft 365 environment without manual configuration?
- Auto-labeling policies (Correct answer)
- Trainable classifiers
- Content explorer
- Sensitivity label policies
Correct answer: Auto-labeling policies
Auto-labeling policies automatically detect and apply sensitivity labels to content based on predefined conditions without user intervention.
Question 2: A user in your organization emails a document labeled 'Confidential' to an external recipient. The recipient cannot open it. What Microsoft Purview feature most likely caused this?
- Data Loss Prevention policy
- Sensitivity label with encryption (Correct answer)
- Retention policy
- Insider Risk Management alert
Correct answer: Sensitivity label with encryption
Sensitivity labels with encryption restrict access to authorized users, preventing external recipients without proper permissions from opening the file.
Question 3: What is the primary purpose of Microsoft Purview Content Explorer?
- To apply sensitivity labels to files automatically
- To block data transfers to USB drives
- To provide visibility into where sensitive content exists across your environment (Correct answer)
- To create and manage retention policies
Correct answer: To provide visibility into where sensitive content exists across your environment
Content Explorer gives administrators a view of all labeled and sensitive content discovered across Microsoft 365 services.
Question 4: Which sensitivity label sublabel feature allows organizations to group related labels under a parent label for better organization?
- Label scoping
- Label priority
- Label taxonomy
- Sublabels (Correct answer)
Correct answer: Sublabels
Sublabels allow you to nest labels under a parent label, helping users choose the right classification level within a category like 'Confidential'.
Question 5: Your organization wants to prevent users from removing or downgrading a sensitivity label without providing justification. Which setting enables this?
- Mandatory labeling
- Label encryption enforcement
- Label change justification requirement (Correct answer)
- Default label policy
Correct answer: Label change justification requirement
Requiring justification for label downgrade or removal creates an audit trail and makes users confirm why they are reducing protection on content.
Question 6: What happens to encrypted content protected by a Microsoft Purview sensitivity label when the user's Azure AD account is deleted?
- The encryption is automatically removed
- The content remains permanently inaccessible unless super user access is configured (Correct answer)
- The file becomes publicly accessible
- Azure AD automatically transfers access to the user's manager
Correct answer: The content remains permanently inaccessible unless super user access is configured
Once the account is deleted, encrypted content becomes inaccessible unless an Azure Information Protection super user or recovery key is configured.
Question 7: Which of the following is a trainable classifier use case in Microsoft Purview Information Protection?
- Blocking all file downloads from SharePoint
- Identifying resumes or source code documents that don't match predefined patterns (Correct answer)
- Enforcing multi-factor authentication on labeled files
- Automatically encrypting all email attachments
Correct answer: Identifying resumes or source code documents that don't match predefined patterns
Trainable classifiers use machine learning to identify content types like resumes or source code that are difficult to define with simple keyword or pattern rules.
SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Purview Information Protection 2
Which Microsoft Purview feature automatically discovers and classifies sensitive data across your Microsoft 365 environment without manual configuration?