SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Purview Information Protection 3 — Questions and Answers
Question 1: Which Microsoft Purview Information Protection capability allows organizations to apply labels and protection to on-premises files stored in file shares and SharePoint Server?
- Microsoft Purview Data Map
- Microsoft Purview Information Protection scanner (Correct answer)
- Azure AD Conditional Access
- Microsoft Defender for Cloud Apps
Correct answer: Microsoft Purview Information Protection scanner
The Microsoft Purview Information Protection scanner discovers, classifies, and protects files stored on-premises in file shares and SharePoint Server.
Question 2: What does 'Do Not Forward' protection in Microsoft Purview Information Protection restrict when applied to an email?
- Prevents the email from being sent to external domains
- Restricts recipients from forwarding, printing, or copying the email content (Correct answer)
- Blocks the email from being stored in the recipient's mailbox
- Requires the recipient to use MFA before opening the email
Correct answer: Restricts recipients from forwarding, printing, or copying the email content
'Do Not Forward' is a usage rights restriction that prevents recipients from forwarding, printing, or copying content from the protected email.
Question 3: In Microsoft Purview, what is the difference between a sensitivity label and a retention label?
- Sensitivity labels control data lifecycle; retention labels control access
- Sensitivity labels protect content from unauthorized access; retention labels govern how long content is kept (Correct answer)
- They are two names for the same feature
- Sensitivity labels apply only to email; retention labels apply only to files
Correct answer: Sensitivity labels protect content from unauthorized access; retention labels govern how long content is kept
Sensitivity labels classify and protect content from unauthorized access, while retention labels manage how long content must be kept or when it can be deleted.
Question 4: Which role is required to create and manage sensitivity labels in the Microsoft Purview compliance portal?
- Security Reader
- Compliance Administrator or higher (Correct answer)
- SharePoint Administrator
- Global Reader
Correct answer: Compliance Administrator or higher
Creating and managing sensitivity labels requires the Compliance Administrator role or equivalent permissions in the Microsoft Purview compliance portal.
Question 5: How does Microsoft Purview Information Protection protect content shared via Microsoft Teams meetings?
- By blocking recording of meetings with sensitive labels
- By applying sensitivity labels to Teams channels that control access to meeting content and recordings (Correct answer)
- By requiring all meeting participants to use encrypted VPN connections
- By automatically transcribing meetings and flagging sensitive keywords
Correct answer: By applying sensitivity labels to Teams channels that control access to meeting content and recordings
Sensitivity labels applied to Teams channels and meetings control meeting options, access to recordings, and who can join, protecting sensitive discussions.
Question 6: What is the function of the 'Activity Explorer' in Microsoft Purview?
- It scans files for sensitive information types
- It shows label application activities and user interactions with labeled content over time (Correct answer)
- It creates automatic sensitivity label recommendations
- It blocks unauthorized file transfers in real time
Correct answer: It shows label application activities and user interactions with labeled content over time
Activity Explorer provides an audit log of labeling activities and user interactions with sensitive content, helping administrators track how data is being handled.
Question 7: Which component of Microsoft Purview Information Protection allows users to manually classify a document before saving it?
- Microsoft Purview Compliance Manager
- Sensitivity label in Office apps via the sensitivity label bar (Correct answer)
- Microsoft Defender for Endpoint
- Azure Information Protection unified labeling client
Correct answer: Sensitivity label in Office apps via the sensitivity label bar
The sensitivity label bar in Office apps (Word, Excel, PowerPoint, Outlook) allows users to manually select and apply a label before or while saving content.
SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Purview Information Protection 3
Which Microsoft Purview Information Protection capability allows organizations to apply labels and protection to on-premises files stored in file shares and SharePoint Server?