SC-900 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance 4 — Questions and Answers
Question 1: What is the Microsoft Purview compliance portal primarily used for?
- Managing Azure subscriptions and billing
- Centrally configuring and monitoring compliance solutions across Microsoft 365 (Correct answer)
- Deploying virtual machines with compliant configurations
- Patching operating systems across the enterprise
Correct answer: Centrally configuring and monitoring compliance solutions across Microsoft 365
The Microsoft Purview compliance portal is the central hub for configuring DLP, retention policies, sensitivity labels, eDiscovery, and other compliance tools in Microsoft 365.
Question 2: Which concept describes classifying data based on its level of sensitivity, such as Public, Internal, Confidential, and Highly Confidential?
- Data lifecycle management
- Data classification taxonomy (Correct answer)
- Data residency policy
- Data loss prevention
Correct answer: Data classification taxonomy
A data classification taxonomy defines categories of sensitivity so that appropriate protections can be applied consistently across an organization's information assets.
Question 3: What does the Microsoft Compliance Manager use to help organizations assess their compliance posture?
- Penetration test results from Microsoft
- Improvement actions mapped to regulatory controls (Correct answer)
- AI-generated legal opinions
- Real-time threat intelligence feeds
Correct answer: Improvement actions mapped to regulatory controls
Compliance Manager provides improvement actions mapped to specific regulatory frameworks, and completing those actions raises the organization's compliance score.
Question 4: A user accidentally deletes a file in SharePoint that is covered by a retention policy. What happens to the file?
- It is permanently deleted immediately
- It is moved to the Preservation Hold Library and retained until the policy period ends (Correct answer)
- It is sent to the compliance officer for review
- It is archived to Azure Blob Storage automatically
Correct answer: It is moved to the Preservation Hold Library and retained until the policy period ends
When a retained item is deleted, Microsoft 365 moves it to the Preservation Hold Library (a hidden library) so it continues to be retained per the policy.
Question 5: Which eDiscovery feature allows legal teams to identify duplicate emails and near-duplicate documents to reduce review volume?
- Legal hold
- Content search
- Analytics in eDiscovery (Premium) (Correct answer)
- Custodian management
Correct answer: Analytics in eDiscovery (Premium)
eDiscovery (Premium) analytics capabilities identify duplicate and near-duplicate items, email threads, and themes, significantly reducing the volume of content requiring manual review.
Question 6: What is 'data residency' in the context of Microsoft 365 compliance?
- Storing all data in encrypted form
- Ensuring specific data is stored in a defined geographic region (Correct answer)
- Retaining data for a minimum number of years
- Restricting data access to on-premises systems only
Correct answer: Ensuring specific data is stored in a defined geographic region
Data residency refers to the requirement that certain data be stored and processed within a specific country or region to meet local legal or regulatory obligations.
Question 7: Which Microsoft Purview solution is specifically designed to manage records in compliance with regulations that require formal records declaration and immutability?
- Data Loss Prevention
- Records Management (Correct answer)
- Insider Risk Management
- Information Protection
Correct answer: Records Management
Microsoft Purview Records Management enables organizations to formally declare items as records, making them immutable and subject to strict retention and disposition requirements.
SC-900 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance 4
What is the Microsoft Purview compliance portal primarily used for?