Which Microsoft Purview Solution Identifies Data Leakage?

Answer Correct answer: A — Insider Risk Management, the Microsoft Purview solution that detects and investigates data leakage by insiders across Microsoft 365.

Which Microsoft Purview solution can be used to identify data leakage?

  1. insider risk management Correct Answer
  2. Compliance Manager
  3. communication compliance
  4. eDiscovery

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The question tests whether you can map a Purview workload to its core purpose — 'identify data leakage' means detecting risky insider activity, and the trap is choosing eDiscovery because it sounds like an investigation tool.

Microsoft Purview Insider Risk Management is the solution that correlates signals from Microsoft 365 to identify data leakage and other risky insider activity. This page confirms Insider Risk Management (A) as the correct SC-900 answer and explains why Compliance Manager, communication compliance, and eDiscovery do not fit the 'identify data leakage' wording.

Picking eDiscovery (D), because it deals with searching and preserving content; however, eDiscovery supports legal and regulatory case investigations on demand, not the continuous identification of data-leakage risk from insiders.

Community Discussion (3 comments)

TechyStacy 👍 2 Selected: A
Insider risk Management
LegendaryZA 👍 1 Selected: A
Answer: Insider Risk Management
MSMN91 👍 3
Insider Risk Management in Microsoft 365 is designed to help organizations identify and mitigate risks associated with data leakage caused by insider threats.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Insider Risk Management in Microsoft Purview is explicitly built to surface risky user activity that can lead to data leakage, such as mass downloads, exfiltration to personal cloud storage, or departing-employee data theft. It correlates signals from Microsoft 365, HR, and other sources into risk scores and alerts so an investigator can act. The question asks which solution is used to identify data leakage, and detection of risky insider behavior is precisely the mandate of Insider Risk Management. As MSMN91 put it, Insider Risk Management is designed to help organizations identify and mitigate risks associated with data leakage caused by insider threats. Option A matches the scenario wording directly.

Why the Other Options Are Wrong

Compliance Manager (B) is an assessment and scoring tool — it measures your posture against regulations and recommends improvement actions, but it does not monitor user activity for leakage. Communication compliance (C) analyzes chat, email, and Teams text for policy violations such as harassment or inappropriate language, not bulk data movement. eDiscovery (D) searches, holds, and exports content for legal cases; it is reactive and case-driven rather than a proactive data-leakage identifier. None of these three own the 'identify data leakage' outcome the way Insider Risk Management does.

Community Comment Notes

Community sentiment on this item is unanimous: the vote tally shows 100% choosing A, with no dissenting explanations. LegendaryZA states plainly "Answer: Insider Risk Management", TechyStacy replies "Insider risk Management", and MSMN91 adds the reasoning that the workload mitigates leakage caused by insider threats. Because all three comments point at the same workload for the same reason as the official exam doctrine, there is no credible community argument for Compliance Manager, communication compliance, or eDiscovery here.

Official Reference

Exam Strategy

Memorize a one-line purpose for each Purview solution: Insider Risk Management = detect risky insider activity/data leakage, Communication Compliance = inappropriate communications, Compliance Manager = posture assessments, eDiscovery = legal case content. In SC-900, match the verb in the question ('identify', 'assess', 'search') to the workload's primary purpose rather than to any overlapping feature.

Frequently Asked Questions

Why isn't eDiscovery the answer for identifying data leakage?

eDiscovery collects, holds, and exports content for legal or regulatory cases on demand; it does not proactively surface the insider risk signals that indicate data leakage.

Does Compliance Manager detect data leakage in Microsoft 365?

No. Compliance Manager scores your compliance posture against regulations and proposes improvement actions, but it does not monitor user activity for leakage.

Related Analysis

Practice All SC-900 Questions

Access 141 questions with complete answers and detailed explanations.

View Full SC-900 Practice Test →

← Back to SC-900 Study Guide