SC-900 Information Protection & Data Governance 3 — Questions and Answers
Question 1: What does the Microsoft Purview Data Map provide?
- A visual map of DLP policy coverage across all services
- A unified map of data assets and their classifications across on-premises and cloud sources (Correct answer)
- A geographic map showing where company data is physically stored
- A dashboard for monitoring sensitivity label usage
Correct answer: A unified map of data assets and their classifications across on-premises and cloud sources
The Microsoft Purview Data Map scans and catalogs data assets across hybrid and multi-cloud environments, providing a unified view with automated classification.
Question 2: A DLP policy is set to 'block with override' for sharing credit card numbers externally. What can users do in this scenario?
- Users cannot share the content under any circumstance
- Users can share after providing a business justification (Correct answer)
- Users can share only if their manager approves first
- Users can share if they remove the sensitive information first
Correct answer: Users can share after providing a business justification
Block with override allows users to bypass the DLP block by providing a business justification, which is logged for compliance review.
Question 3: Which type of sensitive information type uses document fingerprinting to detect sensitive forms?
- Exact Data Match (EDM)
- Named entities
- Document fingerprint (Correct answer)
- Keyword dictionary
Correct answer: Document fingerprint
Document fingerprinting converts a standard form (like a W-2 or patent form) into a fingerprint used to detect when similar forms are shared.
Question 4: In Microsoft Purview, what is Exact Data Match (EDM) classification used for?
- Matching data based on approximate spelling similarities
- Identifying sensitive information based on exact values in a customer database (Correct answer)
- Classifying documents based on their file type
- Detecting data that is encrypted incorrectly
Correct answer: Identifying sensitive information based on exact values in a customer database
EDM allows organizations to create custom sensitive information types that match exact values from a structured database, such as a list of employee IDs or patient records.
Question 5: What happens when a Microsoft Purview retention policy conflicts with a retention label applied to the same content?
- The retention policy always takes precedence over the label
- The label always takes precedence over the policy
- The setting that retains data for the longest period takes precedence (Correct answer)
- The conflict causes an error and neither setting is applied
Correct answer: The setting that retains data for the longest period takes precedence
Microsoft Purview applies the principle of 'preserve over delete' and uses the longest retention period when policies and labels conflict.
Question 6: Which Microsoft Purview tool allows legal teams to search for and export data related to an investigation or legal case?
- Compliance Manager
- Content search via eDiscovery (Correct answer)
- Audit log search
- Activity Explorer
Correct answer: Content search via eDiscovery
eDiscovery in Microsoft Purview enables legal teams to search, hold, and export content from Microsoft 365 services for litigation or regulatory investigations.
Question 7: What is the purpose of the Microsoft Purview Activity Explorer?
- To create and publish sensitivity labels to users
- To monitor and audit labeled content activities like downloads, prints, and shares (Correct answer)
- To set retention periods for SharePoint document libraries
- To manage DLP policy templates across the organization
Correct answer: To monitor and audit labeled content activities like downloads, prints, and shares
Activity Explorer shows a timeline of activities performed on labeled or sensitive content, helping administrators understand how data is being used across the organization.
SC-900 Information Protection & Data Governance 3
What does the Microsoft Purview Data Map provide?