SC-900 Information Protection & Data Governance 5

Question 1

What is the role of 'named entities' as a sensitive information type in Microsoft Purview?

Accepted Answer

They detect personal information like names, medical terms, and addresses using AI-based models

Answer

Named entities use pre-built AI models to detect personal information such as people's names, medical conditions, and physical addresses across content.

Question 2

A company must ensure that emails containing Social Security Numbers are never sent outside the organization. Which Microsoft Purview solution directly addresses this?

Accepted Answer

Data Loss Prevention (DLP) policies

Answer

DLP policies can detect sensitive information types like Social Security Numbers and block or restrict sharing of that content outside the organization.

Question 3

In Microsoft Purview, what is the difference between 'auto-apply' retention labels and 'published' retention labels?

Accepted Answer

Published labels are made available for users or admins to apply manually; auto-apply labels are applied automatically based on conditions

Answer

Published retention labels appear in apps for users or admins to manually apply, while auto-apply labels are configured with conditions and applied by the service automatically.

Question 4

Which Microsoft Purview feature provides a risk score for each user based on their activities, such as downloading large volumes of data before resigning?

Accepted Answer

Insider risk management

Answer

Insider risk management assigns risk scores to users based on signals like unusual file downloads, access to sensitive data, or departure indicators like resignation emails.

Question 5

What is the Microsoft Purview 'Service Trust Portal' used for?

Accepted Answer

Accessing audit reports, compliance documentation, and trust information about Microsoft's cloud services

Answer

The Service Trust Portal provides access to Microsoft's audit reports, compliance certifications, and documentation about how Microsoft protects customer data.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Information Protection & Data Governance 5