FirstTry

Exam objective

SC-900

Describe information protection, data lifecycle management, and data governance capabilities of Microsoft Purview

This objective sits in Describe capabilities of Microsoft compliance solutions, which carries 22% of the Security, Compliance, and Identity Fundamentals exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.

Objective title verbatim from the official objectives. Microsoft Azure exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

Describe capabilities of Microsoft compliance solutions

A compliance administrator wants a graphical view of which SharePoint files carry a sensitivity or retention label, and how users are interacting with those files. Which Microsoft Purview capability supplies this view?

Data classification showing labeled items and the actions users take on themCorrect · your answerCorrect: this capability provides the graphical view of labeled and classified items and user activity.
Trainable classifiers that identify sensitive items using examples of the dataTrainable classifiers are a method for identifying sensitive items by example, used to build classification, not to display a report of labeled items.
Sensitivity labels that apply encryption, access restrictions, and visual markingsSensitivity labels apply protection actions like encryption and markings, but they do not themselves produce the graphical usage report the administrator wants.
Sensitive information types that identify items using regular expressionsSensitive information types are a detection method using regex or functions, feeding classification rather than producing the visibility report itself.
Data Loss Prevention policies that audit or block sharing of sensitive itemsData Loss Prevention enforces policy actions on sensitive content but is not the reporting capability that shows labeled items and their usage.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

Microsoft Purview provides several distinct capabilities for identifying and reporting on sensitive data, each serving a different purpose within information protection.

Why A

Data classification gives a graphical identification of items that have a sensitivity label, a retention label, or have been otherwise classified, along with the actions users are taking on them, matching the administrator's need for a visibility report.

Source

Data classification provides a graphical identification of items in your organization that have a sensitivity label, a retention label, or have been classified and the actions your users are taking on them…

Microsoft Purview security, checked July 2026
#purview#information-protection#data-classification

Now you: practice questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

Describe capabilities of Microsoft compliance solutions

A security team builds a Microsoft Purview data loss prevention policy that blocks sharing of documents containing driver's license numbers, but lets users override the block with a justification. Which DLP policy element controls this behavior?

Sample question 2 of 3

Describe capabilities of Microsoft compliance solutions

A compliance officer needs certain contracts labelled so that the label cannot be removed and the retention period cannot be shortened afterwards. Which Microsoft Purview option provides this?

Sample question 3 of 3

Describe capabilities of Microsoft compliance solutions

A regulation requires an organization to keep certain documents for a minimum period, after which it wants them permanently deleted to reduce exposure. Which Microsoft Purview tools are built for this?

Full Security, Compliance, and Identity Fundamentals question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Describe capabilities of Microsoft compliance solutions