SC-900 - Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance Questions and Answers

Question 1

An organization wants to ensure that any Microsoft Office document containing a specific internal project code, "Project Titan," is automatically encrypted and has a "Confidential" watermark applied. Which Microsoft Purview feature should be configured to meet this requirement?

Accepted Answer

Sensitivity label

Answer

Sensitivity labels are used to classify and protect data. They can be configured to automatically apply protections like encryption and content markings (such as watermarks and headers) when specific conditions, like the presence of a keyword or sensitive information type, are met within a file or email.

Question 2

A financial services company is required by regulators to monitor employee communications in Microsoft Teams to detect potential insider trading or sharing of confidential client information. Which Microsoft Purview solution is specifically designed for this purpose?

Accepted Answer

Communication Compliance

Answer

Microsoft Purview Communication Compliance is an insider risk solution that helps minimize communication risks by detecting, capturing, and acting on inappropriate messages. It uses policies to scan internal and external communications, including Microsoft Teams messages, for content that violates regulatory or business conduct standards.

Question 3

A company's legal department must identify and preserve all emails and documents related to a specific employee for the last two years due to pending litigation. The data must not be altered or deleted by the employee. Which Microsoft Purview solution should the legal team use to meet this requirement?

Accepted Answer

eDiscovery (Premium)

Answer

Microsoft Purview eDiscovery (Premium) is designed for legal and investigative scenarios. It allows authorized personnel to create cases, identify custodians (like the specified employee), search for relevant content, and place a legal hold on data locations to preserve the information in-place and prevent modification or deletion.

Question 4

An organization needs to ensure that all chat messages in Microsoft Teams are permanently deleted after 90 days to comply with its data minimization policy. Which Microsoft Purview feature should be used to automate this process?

Accepted Answer

Retention policy

Answer

Retention policies are the core feature of Microsoft Purview Data Lifecycle Management used to manage the data lifecycle. A retention policy can be configured to automatically delete content, such as Teams chat messages, after a specified period.

Question 5

What is the primary purpose of a Microsoft Purview Data Loss Prevention (DLP) policy?

Accepted Answer

To identify and prevent the accidental or inappropriate sharing of sensitive information.

Answer

The core function of a Data Loss Prevention (DLP) policy is to identify sensitive information across locations like Microsoft 365 services and prevent it from being shared inappropriately or accidentally with unauthorized individuals. It acts on data in motion to block actions like sending an email with credit card numbers to an external recipient.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 - Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance Questions and Answers