AI Bot
SC-500: Microsoft Purview & Data Classification Flashcards
Microsoft Cloud and AI Security Engineer Associate SC-500 Flashcards
Study our SC-500: Microsoft Purview & Data Classification flashcards for the Microsoft Cloud and AI Security Engineer Associate SC-500 exam with 43+ flashcards. View as flashcards, a searchable table, or as a fun matching game.
| Front | Back |
| How can you test custom sensitive information types safely? | Run classification in test mode on a limited dataset or use non production scans |
| How do sensitivity labels get enforced on endpoints? | Via the MIP unified labeling client and Microsoft Office integrations |
| How do sensitivity labels interact with sharing externally? | Labels can apply encryption and access restrictions that block or control external sharing |
| How does Purview handle cloud connectors? | It uses built in connectors to scan cloud services like Microsoft 365 and Azure storage |
| Name a common on prem data source Purview can scan | File share |
| Name a type of classifier used by Purview | Trainable classifier |
| What are built in sensitive information types? | Predefined patterns for common sensitive data like credit cards and social security numbers |
| What are connectors for on prem sources called? | Scan connectors or hybrid scanners |
| What are visual markings in sensitivity labels? | Header footer or watermark text applied to documents to indicate classification |
| What does label encryption do? | Encrypts content so only authorized users or recipients can access it |
| What is a classification rule package? | A collection of rules and types used together to detect sensitive content |
| What is a content explorer in Purview? | A tool that shows discovered sensitive items to help analysts investigate classification results |
| What is a content scan rule? | A set of conditions and actions that defines how content is classified and labeled |
| What is a custom sensitive information type? | A user defined pattern or rule used to detect specific sensitive data not covered by built in types |
| What is a data classification scan in Purview? | A process that discovers and classifies sensitive data across connected data sources |
| What is a data source connection in Purview? | A configured connector that allows Purview to scan a specific storage or database location |
| What is a keyword list sensitivity type? | A detector that flags content containing words or phrases from a specified list |
| What is a label priority? | The order that determines which label is applied when multiple labels match content |
| What is a pattern based detection method? | Using regular expressions and other patterns to identify sensitive information |
| What is a retention label and how does it differ from a sensitivity label? | Retention labels control data lifecycle and preservation while sensitivity labels control protection and access |
| What is a scanner in Microsoft Purview? | A service that connects to a data source and runs classifications and metadata extraction |
| What is a sensitivity label policy tip? | A notification shown to users explaining why a label was suggested or applied |
| What is a sensitivity label? | A tag applied to content that enforces protection actions like encryption and access restrictions |
| What is a trainable classifier used for? | Detecting complex content types using machine learning models trained on example documents |
| What is adaptive scopes in Purview labeling? | A feature that refines auto labeling to target specific files or users over time |
| What is an activity explorer in Purview? | A tool to view user and admin actions related to data access and label application |
| What is an audit log in Purview used for? | Tracking actions and events for compliance and investigation |
| What is auto labeling? | Automatic application of sensitivity labels based on content detection rules |
| What is Exact Data Match data preparation requirement? | A structured reference dataset that is hashed and uploaded for matching |
| What is Exact Data Match EDM? | A classification method that matches data against a hashed reference dataset for precise identification |
| What is Microsoft Information Protection MIP? | A set of technologies including labels and SDKs that enforce data protection across apps |
| What is Microsoft Purview used for? | Governance and classification of data across Microsoft 365 Azure and on prem |
| What is recommended labeling? | A prompt that suggests a label to users while allowing them to confirm or change it |
| What is records management in Purview? | Applying retention rules holds and disposal actions to govern records lifecycle |
| What is the difference between DLP policies and sensitivity labels? | DLP prevents risky actions based on content while sensitivity labels protect content regardless of user action |
| What is the difference between labeling at rest and labeling in use? | Labeling at rest applies to stored files while labeling in use applies during content creation and modification |
| What is the Microsoft Purview catalog? | The searchable inventory of discovered data assets schemas and classifications |
| What is the purpose of classification reports? | To measure coverage accuracy and trends of sensitive data discovery over time |
| What is the purpose of label policies? | To publish sensitivity labels to users and devices and define how labels are applied |
| What is the Purview Data Map? | A unified metadata catalog that maps and maintains discovered data assets and their classifications |
| What is the recommended first step when building a classification strategy? | Define sensitive data types and prioritize high risk repositories |
| What is the role of Purview roles and permissions? | To control who can configure scans manage labels and view sensitive data reports |
| What is the significance of data residency and privacy when using Purview? | Ensuring scans and metadata storage comply with regional regulations and organizational policies |
About the Flashcards
Flashcards for the Microsoft Cloud and AI Security Engineer Associate exam provide focused review of Microsoft Purview and Microsoft Information Protection fundamentals, helping students learn key terminology and core workflows for data governance, classification, and labeling. Cards explain Purview's Data Map, scanners and connectors, content and activity explorers, and differences between sensitivity and retention labels.
They also quiz classification techniques (pattern-based, keyword lists, trainable classifiers, Exact Data Match), label publication and enforcement via label policies, auto and recommended labeling, encryption and visual markings, MIP client integration, records management, audit and reporting, role permissions, adaptive scopes, and how labels differ from DLP policies.
Topics covered in this flashcard deck:
- Microsoft Purview basics
- Sensitivity labels
- Retention and records
- Classification methods
- Scanners and connectors
- Label policies and enforcement