SC-900 Information Protection & Data Governance 4 — Questions and Answers
Question 1: Which license is required to use Microsoft Purview Information Protection features like sensitivity labels with automatic labeling?
- Microsoft 365 Business Basic
- Microsoft 365 E3 or Microsoft 365 E5 (Correct answer)
- Azure Active Directory Free
- Microsoft 365 F1
Correct answer: Microsoft 365 E3 or Microsoft 365 E5
Advanced features like automatic sensitivity labeling require Microsoft 365 E3 or E5 (or equivalent standalone licenses like Microsoft Purview Information Protection P2).
Question 2: A sensitivity label is configured to apply encryption. Which component is responsible for enforcing this encryption at rest and in transit?
- Microsoft Defender for Cloud Apps
- Azure Rights Management Service (Azure RMS) (Correct answer)
- Microsoft Entra ID Conditional Access
- Microsoft Defender for Endpoint
Correct answer: Azure Rights Management Service (Azure RMS)
Azure Rights Management Service (Azure RMS) is the underlying encryption service that enforces protection policies applied by sensitivity labels.
Question 3: What does 'records management' in Microsoft Purview enable organizations to do?
- Prevent users from creating new documents in SharePoint
- Declare content as an immutable record and manage its lifecycle with regulatory compliance (Correct answer)
- Automatically encrypt all documents older than 5 years
- Block external sharing of all documents in OneDrive
Correct answer: Declare content as an immutable record and manage its lifecycle with regulatory compliance
Records management allows organizations to declare documents as official records, making them immutable, and manage their retention and disposition according to regulatory schedules.
Question 4: Which Microsoft Purview feature helps organizations assess their compliance posture against regulations like GDPR, HIPAA, and ISO 27001?
- Microsoft Secure Score
- Compliance Manager (Correct answer)
- Microsoft Defender for Cloud
- Service Trust Portal
Correct answer: Compliance Manager
Compliance Manager provides a compliance score and step-by-step guidance to help organizations meet regulatory requirements and manage compliance activities.
Question 5: When configuring a DLP policy, what does the 'user notification' option do?
- Sends an alert to the compliance administrator when a violation occurs
- Shows a policy tip to users when they try to share sensitive content (Correct answer)
- Blocks the user's account after repeated violations
- Automatically quarantines the sensitive file
Correct answer: Shows a policy tip to users when they try to share sensitive content
User notifications (policy tips) display in-app messages to users explaining why their action was flagged and providing guidance on compliant behavior.
Question 6: What is the primary function of Microsoft Purview's 'hold' feature in eDiscovery?
- Prevent users from accessing their mailboxes during an investigation
- Preserve content from deletion or modification while a legal case is active (Correct answer)
- Encrypt all content related to a legal case
- Automatically classify content as legally privileged
Correct answer: Preserve content from deletion or modification while a legal case is active
An eDiscovery hold preserves mailbox and SharePoint content in its current state so it cannot be deleted or modified while under legal or regulatory investigation.
Question 7: Which of the following best describes 'data sovereignty' in the context of Microsoft Purview and data governance?
- The requirement that data must be encrypted using only government-approved algorithms
- The principle that data is subject to the laws of the country or region where it is stored (Correct answer)
- The policy that only data owners can classify or label their data
- The rule that sensitive data must only be stored on on-premises servers
Correct answer: The principle that data is subject to the laws of the country or region where it is stored
Data sovereignty refers to the legal principle that data is governed by the laws of the jurisdiction where it resides, which affects how organizations store and process data internationally.
SC-900 Information Protection & Data Governance 4
Which license is required to use Microsoft Purview Information Protection features like sensitivity labels with automatic labeling?