Free SC-900 Microsoft Purview Information Protection Questions and Answers — Questions and Answers
Question 1: What is the primary purpose of applying a sensitivity label to a document or email?
- To archive the content automatically
- To classify and apply protection settings to the content (Correct answer)
- To share the content with external users
- To scan the content for malware
Correct answer: To classify and apply protection settings to the content
The core function of a sensitivity label is to classify data based on its sensitivity. Once classified, the label can then apply protection settings, such as encryption or content marking, to enforce policies and protect the information.
Question 2: A sensitivity label is configured to add a 'Confidential' watermark and encrypt the file. What two capabilities are being used?
- Data loss prevention and eDiscovery
- Content marking and encryption (Correct answer)
- Auditing and retention
- Authentication and authorization
Correct answer: Content marking and encryption
Sensitivity labels can apply both visual markings and protection policies. Content marking includes headers, footers, and watermarks, while encryption restricts access to the content to authorized users only.
Question 3: An organization wants to ensure that all documents containing a passport number are automatically labeled as 'Highly Confidential'. What feature enables this?
- Manual labeling by users
- Data Loss Prevention (DLP) policy actions
- Automatic sensitivity labeling policies (Correct answer)
- Conditional Access policies
Correct answer: Automatic sensitivity labeling policies
Microsoft Purview Information Protection allows for automatic application of sensitivity labels. Policies can be configured to detect specific sensitive information types, like passport numbers, and then automatically apply the appropriate label without user intervention.
Question 4: When a sensitivity label is applied to a container like a Microsoft Teams site, what does it primarily control?
- The individual files' encryption keys
- The retention period for chats and channel messages
- The site's privacy and external sharing settings (Correct answer)
- The number of members allowed in the team
Correct answer: The site's privacy and external sharing settings
When applied to a container (Microsoft 365 Group, Teams site, or SharePoint site), a sensitivity label can control settings like privacy (public vs. private), external user access, and access from unmanaged devices. This helps protect all the content stored within that container.
Question 5: A user applies a 'General' sensitivity label to an email. Later, they add confidential project details and the system recommends changing the label to 'Confidential'. What is this an example of?
- Automatic labeling
- Mandatory labeling
- Recommended labeling (Correct answer)
- Default labeling
Correct answer: Recommended labeling
Recommended labeling is a feature where the system detects sensitive content and suggests that the user apply a more appropriate sensitivity label. This helps guide users to make the correct classification decision without forcing it on them automatically.
Question 6: Where are the protection settings, such as encryption and access rights, for a sensitivity label defined?
- In the Azure Active Directory admin center
- In the Microsoft Purview compliance portal (Correct answer)
- Directly within the user's Office applications
- In the Microsoft Defender portal
Correct answer: In the Microsoft Purview compliance portal
The configuration of sensitivity labels, including their names, descriptions, and associated protection settings (like encryption, content marking, and permissions), is all managed within the Microsoft Purview compliance portal. This central location allows administrators to define and publish labels for the entire organization.
What is the primary purpose of applying a sensitivity label to a document or email?