SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Purview Information Protection 4 — Questions and Answers
Question 1: What is the purpose of the 'default label' setting in a Microsoft Purview sensitivity label policy?
- It forces encryption on all documents regardless of their label
- It automatically applies a specific label to new content when users don't manually choose one (Correct answer)
- It prevents users from applying any label other than the default
- It removes all labels from documents when they are shared externally
Correct answer: It automatically applies a specific label to new content when users don't manually choose one
The default label setting ensures new documents or emails receive a baseline label automatically if the user does not manually select one.
Question 2: Which sensitive information type (SIT) is built into Microsoft Purview and detects US Social Security Numbers?
- A trainable classifier for personal data
- A predefined SIT using pattern matching and checksum validation (Correct answer)
- A custom SIT that must be created by each organization
- A keyword dictionary SIT requiring manual configuration
Correct answer: A predefined SIT using pattern matching and checksum validation
Microsoft Purview includes predefined sensitive information types like U.S. Social Security Number that use regex patterns and checksum validation to detect SSNs accurately.
Question 3: An organization needs to automatically apply a sensitivity label to documents that contain credit card numbers. Which feature combination achieves this?
- Trainable classifiers plus retention policies
- Auto-labeling policy with a credit card sensitive information type condition (Correct answer)
- Default label policy plus DLP rule
- Insider Risk Management plus sensitivity label
Correct answer: Auto-labeling policy with a credit card sensitive information type condition
An auto-labeling policy configured with the credit card number sensitive information type will automatically detect and label documents containing that data.
Question 4: What does 'label inheritance' mean in the context of Microsoft Purview sensitivity labels for containers like Teams and SharePoint?
- Child documents in a labeled site automatically inherit the site's sensitivity label (Correct answer)
- Labels are inherited from parent tenants in multi-tenant configurations
- Labels are copied from one user to another during offboarding
- Sublabels inherit all permissions from their parent label automatically
Correct answer: Child documents in a labeled site automatically inherit the site's sensitivity label
When a container like a SharePoint site or Teams channel has a sensitivity label, documents created or stored within it can inherit that label automatically.
Question 5: Which Microsoft Purview feature enables organizations to understand their data estate by scanning and cataloging data across multi-cloud and on-premises sources?
- Microsoft Purview Information Protection scanner
- Microsoft Purview Data Map (Correct answer)
- Microsoft Purview Compliance Manager
- Microsoft Purview Audit
Correct answer: Microsoft Purview Data Map
Microsoft Purview Data Map scans and catalogs data sources across Azure, AWS, on-premises, and SaaS to provide a unified map of an organization's data estate.
Question 6: A sensitivity label includes a watermark setting. Where does this watermark appear?
- In the email subject line as a prefix
- As a visible text watermark in the body of Word documents and PowerPoint slides (Correct answer)
- As a metadata tag invisible to end users
- In the file name as a suffix appended automatically
Correct answer: As a visible text watermark in the body of Word documents and PowerPoint slides
Watermarks configured in sensitivity label settings appear as visible text overlays in the body of Word documents and PowerPoint presentations.
Question 7: What is the key difference between client-side auto-labeling and service-side auto-labeling in Microsoft Purview?
- Client-side labeling applies to files at rest; service-side applies only to emails in transit
- Client-side labeling shows users label recommendations; service-side automatically applies labels in the background without user interaction (Correct answer)
- Client-side labeling requires Office 365 E3; service-side requires E5
- There is no difference — they are the same feature with different names
Correct answer: Client-side labeling shows users label recommendations; service-side automatically applies labels in the background without user interaction
Client-side auto-labeling presents recommendations to users in Office apps, while service-side auto-labeling silently applies labels to content stored in SharePoint, OneDrive, and Exchange.
SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Purview Information Protection 4
What is the purpose of the 'default label' setting in a Microsoft Purview sensitivity label policy?