Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance Flashcards
7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance flashcards as text
What is the difference between a 'sensitivity label' and a 'retention label' in Microsoft Purview?
Answer: Sensitivity labels protect data in use; retention labels govern how long data is kept
Sensitivity labels classify and protect content by applying encryption or access restrictions, while retention labels manage the lifecycle of content by specifying how long it must be kept.
Which regulation established the right to be forgotten, requiring organizations to delete personal data upon request?
Answer: GDPR
The General Data Protection Regulation (GDPR) introduced the right to erasure, commonly called the right to be forgotten, allowing EU residents to request deletion of their personal data.
What does the Microsoft Purview Data Map provide in the context of data governance?
Answer: A unified inventory of an organization's data assets and their classification
The Microsoft Purview Data Map creates a unified, automated inventory of data assets across cloud and on-premises sources, with classification metadata to support governance.
An organization places a mailbox on 'Litigation Hold'. What is the primary effect?
Answer: All existing and new mailbox content is preserved even if users delete it
Litigation Hold preserves all mailbox content, including items the user deletes or modifies, ensuring nothing is permanently removed during legal proceedings.
Which Microsoft Purview feature generates a Compliance Score to help organizations measure and track their compliance progress?
Answer: Compliance Manager
Microsoft Purview Compliance Manager calculates a Compliance Score based on completed improvement actions, giving organizations a measurable indicator of their compliance posture.
Which statement best describes the concept of 'least privilege' as it applies to data governance?
Answer: Users should have access only to the data necessary for their job function
The principle of least privilege in data governance means granting users access only to the data they need to perform their roles, reducing the risk of unauthorized exposure.
What capability does Microsoft Purview's 'Content Search' provide to compliance administrators?
Answer: Searching for content across Exchange, SharePoint, Teams, and OneDrive for compliance purposes
Content Search in Microsoft Purview allows administrators to search for emails, documents, Teams messages, and other content across Microsoft 365 services to support compliance investigations.