SC-900 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance 3 — Questions and Answers
Question 1: Which Microsoft service provides an immutable audit log of user and admin activity across Microsoft 365 services?
- Microsoft Defender for Cloud
- Microsoft Purview Audit (Correct answer)
- Azure Monitor
- Microsoft Sentinel
Correct answer: Microsoft Purview Audit
Microsoft Purview Audit captures and retains records of user and admin activities across Microsoft 365 services, supporting compliance investigations.
Question 2: What distinguishes Microsoft Purview Audit (Premium) from Audit (Standard)?
- Premium includes real-time alerts only
- Premium provides longer retention and more log event types (Correct answer)
- Premium is only available for government tenants
- Premium adds encryption to audit records
Correct answer: Premium provides longer retention and more log event types
Audit (Premium) extends log retention up to 10 years and captures additional high-value events not available in the Standard tier, such as MailItemsAccessed.
Question 3: A financial services firm must prevent analysts from sharing merger-related documents with investment bankers. Which feature should they configure?
- Sensitivity labels
- Retention policies
- Information Barriers (Correct answer)
- Insider Risk Management
Correct answer: Information Barriers
Information Barriers segment users so that defined groups, such as analysts and investment bankers, cannot communicate or share documents with each other.
Question 4: Which Microsoft Purview capability monitors employee communications for policy violations such as harassment or regulatory non-compliance?
- Communication Compliance (Correct answer)
- Insider Risk Management
- Data Loss Prevention
- Records Management
Correct answer: Communication Compliance
Communication Compliance monitors emails, Teams messages, and other communications to detect policy violations, helping organizations meet regulatory requirements.
Question 5: What is a 'disposition review' in Microsoft Purview Records Management?
- A review triggered when a sensitivity label is applied
- A human review required before content is permanently deleted at the end of a retention period (Correct answer)
- An automated scan for malware in retained files
- A process to reclassify data after a breach
Correct answer: A human review required before content is permanently deleted at the end of a retention period
A disposition review is a workflow that requires designated reviewers to approve or reject the permanent deletion of content when its retention period expires.
Question 6: Which Microsoft Purview feature helps identify and mitigate risks from potentially malicious or inadvertent insider activities?
- eDiscovery
- Insider Risk Management (Correct answer)
- Communication Compliance
- Data Lifecycle Management
Correct answer: Insider Risk Management
Microsoft Purview Insider Risk Management uses signals from Microsoft 365 to detect, investigate, and act on potentially risky activities by insiders.
Question 7: When a sensitivity label includes encryption, what controls can be enforced on the protected document?
- Only the expiry date of the document
- Permissions such as who can open, edit, copy, or print the content (Correct answer)
- Only the geographic location where it can be opened
- Only the file format the document is saved in
Correct answer: Permissions such as who can open, edit, copy, or print the content
Sensitivity labels with encryption use Azure Rights Management to enforce granular permissions such as view-only, edit, copy, and print restrictions on protected content.
SC-900 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance 3
Which Microsoft service provides an immutable audit log of user and admin activity across Microsoft 365 services?