A legal team needs to mark certain contracts as records that cannot be edited or deleted for 5 years. They also want to review each contract before final deletion after the 5-year period. What should they use?

A sensitivity label with encryption and a 5-year retention period.

A retention policy with a 5-year retention period and automatic deletion.

A retention label that marks content as a regulatory record with a 5-year retention period and a disposition review.

A DLP policy that blocks editing and deletion for 5 years.

Which type of information can an administrator view in Content Explorer?

The list of users who have accessed each sensitive file

The full content of every file in the organization

The audit logs of all data-related activities

The count and location of files that match sensitive information types or labels

A company needs to detect documents containing employee ID numbers in a specific format that is unique to the company. They want to use this detection to trigger a DLP policy. What should they create first?

A sensitivity label with a custom keyword.

A DLP policy with a custom rule using a regular expression.

A custom sensitive information type that matches the employee ID format.

A retention label with a custom condition.

Which capability allows an organization to create a custom sensitive information type in Microsoft Purview?

Creating a data loss prevention rule with a custom action

Using a custom template in Sensitivity Labels

Configuring a retention label policy with custom rules

Defining a keyword dictionary and regular expression pattern

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 4Objective 3

Describe Information Protection, Data Lifecycle Management, and Data Governance Capabilities of Microsoft Purview SC-900 Practice Questions (Page 8)

Part of the Describe the capabilities of Microsoft compliance solutions domain, which accounts for 20–25% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~4–8 in this domain), expect 1–2 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

10concepts

20–25%of the exam

10 Concepts in This Objective

Data Classification Capabilities
Content Explorer Benefits
Activity Explorer Benefits
Sensitivity Labels
Sensitivity Label Policies
Data Loss Prevention (DLP)
Records Management
Retention Policies
Retention Labels
Retention Label Policies

Questions 36–40

36application · medium
A legal team needs to mark certain contracts as records that cannot be edited or deleted for 5 years. They also want to review each contract before final deletion after the 5-year period. What should they use?
Select an answer first
37application · medium
A data protection officer wants to identify all files in the organization that contain personal data such as EU debit card numbers, and also see which sensitivity labels are applied to those files. Which tool should they use?
Select an answer first
38foundation · medium
Which type of information can an administrator view in Content Explorer?
Select an answer first
39application · medium
A company needs to detect documents containing employee ID numbers in a specific format that is unique to the company. They want to use this detection to trigger a DLP policy. What should they create first?
Select an answer first
40foundation · medium
Which capability allows an organization to create a custom sensitive information type in Microsoft Purview?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.