SC-900 Information Protection & Data Governance 2 — Questions and Answers
Question 1: Which Microsoft Purview feature automatically discovers and classifies sensitive data stored across Microsoft 365 services?
- Data Loss Prevention
- Sensitivity labels
- Trainable classifiers (Correct answer)
- Information barriers
Correct answer: Trainable classifiers
Trainable classifiers use machine learning to automatically identify and classify content across Microsoft 365 based on what data looks like, not just keywords.
Question 2: A company wants to prevent users in the Legal department from communicating with users in the Trading department. Which Microsoft Purview feature should they use?
- Communication compliance
- Information barriers (Correct answer)
- Data Loss Prevention
- Insider risk management
Correct answer: Information barriers
Information barriers restrict communication between specific groups to prevent conflicts of interest or regulatory violations.
Question 3: What is the purpose of a retention label in Microsoft Purview?
- Encrypt content so only authorized users can read it
- Mark content with visual markings like watermarks
- Manage how long content is retained and what happens at the end of the retention period (Correct answer)
- Block sharing of content outside the organization
Correct answer: Manage how long content is retained and what happens at the end of the retention period
Retention labels control the lifecycle of content by specifying how long to keep it and whether to delete or trigger a review when the period ends.
Question 4: Which capability in Microsoft Purview Content Explorer allows administrators to do?
- Create new sensitivity labels and publish them to users
- View the actual content of files that have been labeled or contain sensitive information (Correct answer)
- Configure DLP policies to block data exfiltration
- Set up retention policies for Microsoft Teams messages
Correct answer: View the actual content of files that have been labeled or contain sensitive information
Content Explorer lets administrators drill down and view the actual content of items that have been classified, labeled, or identified as containing sensitive data.
Question 5: When a sensitivity label is configured with 'Do Not Forward' in Outlook, what happens?
- The email is automatically encrypted and recipients cannot forward, print, or copy the content (Correct answer)
- The email is deleted after 24 hours
- The email is sent only to internal recipients
- The email requires multi-factor authentication to open
Correct answer: The email is automatically encrypted and recipients cannot forward, print, or copy the content
The Do Not Forward option applies Rights Management protection so recipients cannot forward, print, or copy the email content.
Question 6: What distinguishes a sensitivity label from a retention label in Microsoft Purview?
- Sensitivity labels can only be applied manually, while retention labels can be auto-applied
- Sensitivity labels protect content, while retention labels manage content lifecycle (Correct answer)
- Sensitivity labels apply to files only, while retention labels apply to emails only
- Sensitivity labels are free, while retention labels require an additional license
Correct answer: Sensitivity labels protect content, while retention labels manage content lifecycle
Sensitivity labels classify and protect content (via encryption and access controls), while retention labels manage how long content is kept before deletion or review.
Question 7: Which Microsoft Purview solution helps organizations identify and reduce risks from inappropriate sharing of sensitive information by employees?
- Audit
- eDiscovery
- Insider risk management (Correct answer)
- Communication compliance
Correct answer: Insider risk management
Insider risk management uses signals across Microsoft 365 to detect, investigate, and act on risky user activities that could lead to data leaks or security violations.
SC-900 Information Protection & Data Governance 2
Which Microsoft Purview feature automatically discovers and classifies sensitive data stored across Microsoft 365 services?