SC-900 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance 5 — Questions and Answers
Question 1: What is the difference between a 'sensitivity label' and a 'retention label' in Microsoft Purview?
- Sensitivity labels control how long data is kept; retention labels control who can access data
- Sensitivity labels protect data in use; retention labels govern how long data is kept (Correct answer)
- They are different names for the same feature
- Sensitivity labels apply only to email; retention labels apply only to files
Correct answer: Sensitivity labels protect data in use; retention labels govern how long data is kept
Sensitivity labels classify and protect content by applying encryption or access restrictions, while retention labels manage the lifecycle of content by specifying how long it must be kept.
Question 2: Which regulation established the right to be forgotten, requiring organizations to delete personal data upon request?
- HIPAA
- PCI DSS
- GDPR (Correct answer)
- SOX
Correct answer: GDPR
The General Data Protection Regulation (GDPR) introduced the right to erasure, commonly called the right to be forgotten, allowing EU residents to request deletion of their personal data.
Question 3: What does the Microsoft Purview Data Map provide in the context of data governance?
- A visual map of network traffic between servers
- A unified inventory of an organization's data assets and their classification (Correct answer)
- A geographic display of data center locations
- A map of user access permissions across Azure
Correct answer: A unified inventory of an organization's data assets and their classification
The Microsoft Purview Data Map creates a unified, automated inventory of data assets across cloud and on-premises sources, with classification metadata to support governance.
Question 4: An organization places a mailbox on 'Litigation Hold'. What is the primary effect?
- The mailbox owner cannot send new emails
- All existing and new mailbox content is preserved even if users delete it (Correct answer)
- The mailbox is encrypted with a customer-managed key
- The mailbox is migrated to an on-premises archive server
Correct answer: All existing and new mailbox content is preserved even if users delete it
Litigation Hold preserves all mailbox content, including items the user deletes or modifies, ensuring nothing is permanently removed during legal proceedings.
Question 5: Which Microsoft Purview feature generates a Compliance Score to help organizations measure and track their compliance progress?
- Purview Audit
- Compliance Manager (Correct answer)
- eDiscovery
- Information Barriers
Correct answer: Compliance Manager
Microsoft Purview Compliance Manager calculates a Compliance Score based on completed improvement actions, giving organizations a measurable indicator of their compliance posture.
Question 6: Which statement best describes the concept of 'least privilege' as it applies to data governance?
- Users should be trained on the minimum number of compliance policies
- Users should have access only to the data necessary for their job function (Correct answer)
- Admins should configure the fewest number of retention policies possible
- Sensitive labels should be applied only to the minimum number of documents
Correct answer: Users should have access only to the data necessary for their job function
The principle of least privilege in data governance means granting users access only to the data they need to perform their roles, reducing the risk of unauthorized exposure.
Question 7: What capability does Microsoft Purview's 'Content Search' provide to compliance administrators?
- Real-time monitoring of user keystrokes
- Searching for content across Exchange, SharePoint, Teams, and OneDrive for compliance purposes (Correct answer)
- Scanning external websites for leaked company data
- Auditing Azure role assignments across subscriptions
Correct answer: Searching for content across Exchange, SharePoint, Teams, and OneDrive for compliance purposes
Content Search in Microsoft Purview allows administrators to search for emails, documents, Teams messages, and other content across Microsoft 365 services to support compliance investigations.
SC-900 Microsoft Security, Compliance, and Identity Fundamentals Compliance and Data Governance 5
What is the difference between a 'sensitivity label' and a 'retention label' in Microsoft Purview?