Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance Flashcards
7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance flashcards as text
Which Microsoft service provides an immutable audit log of user and admin activity across Microsoft 365 services?
Answer: Microsoft Purview Audit
Microsoft Purview Audit captures and retains records of user and admin activities across Microsoft 365 services, supporting compliance investigations.
What distinguishes Microsoft Purview Audit (Premium) from Audit (Standard)?
Answer: Premium provides longer retention and more log event types
Audit (Premium) extends log retention up to 10 years and captures additional high-value events not available in the Standard tier, such as MailItemsAccessed.
A financial services firm must prevent analysts from sharing merger-related documents with investment bankers. Which feature should they configure?
Answer: Information Barriers
Information Barriers segment users so that defined groups, such as analysts and investment bankers, cannot communicate or share documents with each other.
Which Microsoft Purview capability monitors employee communications for policy violations such as harassment or regulatory non-compliance?
Answer: Communication Compliance
Communication Compliance monitors emails, Teams messages, and other communications to detect policy violations, helping organizations meet regulatory requirements.
What is a 'disposition review' in Microsoft Purview Records Management?
Answer: A human review required before content is permanently deleted at the end of a retention period
A disposition review is a workflow that requires designated reviewers to approve or reject the permanent deletion of content when its retention period expires.
Which Microsoft Purview feature helps identify and mitigate risks from potentially malicious or inadvertent insider activities?
Answer: Insider Risk Management
Microsoft Purview Insider Risk Management uses signals from Microsoft 365 to detect, investigate, and act on potentially risky activities by insiders.
When a sensitivity label includes encryption, what controls can be enforced on the protected document?
Answer: Permissions such as who can open, edit, copy, or print the content
Sensitivity labels with encryption use Azure Rights Management to enforce granular permissions such as view-only, edit, copy, and print restrictions on protected content.