Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance Flashcards
7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance flashcards as text
What is the Microsoft Purview compliance portal primarily used for?
Answer: Centrally configuring and monitoring compliance solutions across Microsoft 365
The Microsoft Purview compliance portal is the central hub for configuring DLP, retention policies, sensitivity labels, eDiscovery, and other compliance tools in Microsoft 365.
Which concept describes classifying data based on its level of sensitivity, such as Public, Internal, Confidential, and Highly Confidential?
Answer: Data classification taxonomy
A data classification taxonomy defines categories of sensitivity so that appropriate protections can be applied consistently across an organization's information assets.
What does the Microsoft Compliance Manager use to help organizations assess their compliance posture?
Answer: Improvement actions mapped to regulatory controls
Compliance Manager provides improvement actions mapped to specific regulatory frameworks, and completing those actions raises the organization's compliance score.
A user accidentally deletes a file in SharePoint that is covered by a retention policy. What happens to the file?
Answer: It is moved to the Preservation Hold Library and retained until the policy period ends
When a retained item is deleted, Microsoft 365 moves it to the Preservation Hold Library (a hidden library) so it continues to be retained per the policy.
Which eDiscovery feature allows legal teams to identify duplicate emails and near-duplicate documents to reduce review volume?
Answer: Analytics in eDiscovery (Premium)
eDiscovery (Premium) analytics capabilities identify duplicate and near-duplicate items, email threads, and themes, significantly reducing the volume of content requiring manual review.
What is 'data residency' in the context of Microsoft 365 compliance?
Answer: Ensuring specific data is stored in a defined geographic region
Data residency refers to the requirement that certain data be stored and processed within a specific country or region to meet local legal or regulatory obligations.
Which Microsoft Purview solution is specifically designed to manage records in compliance with regulations that require formal records declaration and immutability?
Answer: Records Management
Microsoft Purview Records Management enables organizations to formally declare items as records, making them immutable and subject to strict retention and disposition requirements.