Practice Test Geeks(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test
← All SC-900 Flashcard Decks

Information Protection & Data Governance Flashcards

7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Information Protection & Data Governance flashcards as text

  1. Which license is required to use Microsoft Purview Information Protection features like sensitivity labels with automatic labeling?

    Answer: Microsoft 365 E3 or Microsoft 365 E5

    Advanced features like automatic sensitivity labeling require Microsoft 365 E3 or E5 (or equivalent standalone licenses like Microsoft Purview Information Protection P2).

  2. A sensitivity label is configured to apply encryption. Which component is responsible for enforcing this encryption at rest and in transit?

    Answer: Azure Rights Management Service (Azure RMS)

    Azure Rights Management Service (Azure RMS) is the underlying encryption service that enforces protection policies applied by sensitivity labels.

  3. What does 'records management' in Microsoft Purview enable organizations to do?

    Answer: Declare content as an immutable record and manage its lifecycle with regulatory compliance

    Records management allows organizations to declare documents as official records, making them immutable, and manage their retention and disposition according to regulatory schedules.

  4. Which Microsoft Purview feature helps organizations assess their compliance posture against regulations like GDPR, HIPAA, and ISO 27001?

    Answer: Compliance Manager

    Compliance Manager provides a compliance score and step-by-step guidance to help organizations meet regulatory requirements and manage compliance activities.

  5. When configuring a DLP policy, what does the 'user notification' option do?

    Answer: Shows a policy tip to users when they try to share sensitive content

    User notifications (policy tips) display in-app messages to users explaining why their action was flagged and providing guidance on compliant behavior.

  6. What is the primary function of Microsoft Purview's 'hold' feature in eDiscovery?

    Answer: Preserve content from deletion or modification while a legal case is active

    An eDiscovery hold preserves mailbox and SharePoint content in its current state so it cannot be deleted or modified while under legal or regulatory investigation.

  7. Which of the following best describes 'data sovereignty' in the context of Microsoft Purview and data governance?

    Answer: The principle that data is subject to the laws of the country or region where it is stored

    Data sovereignty refers to the legal principle that data is governed by the laws of the jurisdiction where it resides, which affects how organizations store and process data internationally.