SC-900 Information Protection & Data Governance 4

Question 1

Which license is required to use Microsoft Purview Information Protection features like sensitivity labels with automatic labeling?

Accepted Answer

Microsoft 365 E3 or Microsoft 365 E5

Answer

Advanced features like automatic sensitivity labeling require Microsoft 365 E3 or E5 (or equivalent standalone licenses like Microsoft Purview Information Protection P2).

Question 2

A sensitivity label is configured to apply encryption. Which component is responsible for enforcing this encryption at rest and in transit?

Accepted Answer

Azure Rights Management Service (Azure RMS)

Answer

Azure Rights Management Service (Azure RMS) is the underlying encryption service that enforces protection policies applied by sensitivity labels.

Question 3

What does 'records management' in Microsoft Purview enable organizations to do?

Accepted Answer

Declare content as an immutable record and manage its lifecycle with regulatory compliance

Answer

Records management allows organizations to declare documents as official records, making them immutable, and manage their retention and disposition according to regulatory schedules.

Question 4

Which Microsoft Purview feature helps organizations assess their compliance posture against regulations like GDPR, HIPAA, and ISO 27001?

Accepted Answer

Compliance Manager

Answer

Compliance Manager provides a compliance score and step-by-step guidance to help organizations meet regulatory requirements and manage compliance activities.

Question 5

When configuring a DLP policy, what does the 'user notification' option do?

Accepted Answer

Shows a policy tip to users when they try to share sensitive content

Answer

User notifications (policy tips) display in-app messages to users explaining why their action was flagged and providing guidance on compliant behavior.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Information Protection & Data Governance 4