9.3 Microsoft Purview Portal

Portal Versus Product Capability

The Microsoft Purview portal appears in the SC-900 compliance domain because Purview is the Microsoft family associated with compliance and data governance capabilities. The portal wording matters. A portal is a workspace concept, while a capability is the function being used. The exam may ask about the portal generally or about specific Purview capabilities such as Compliance Manager, data classification, sensitivity labels, data loss prevention, retention, eDiscovery, and audit.

A good mental model is to treat Microsoft Purview as the compliance and data governance area, then choose the more specific answer when the scenario provides a specific requirement. If the clue is broad, such as managing compliance solutions in Microsoft Purview, the portal may be the right match. If the clue says track assessments, choose Compliance Manager. If it says label data, choose sensitivity labels. If it says investigate activity, look for audit or explorer wording.

Do not treat the portal as a replacement for every Purview feature. A portal is where capabilities are surfaced, but the exam answer should still match the job in the scenario. This is especially important when answer choices include both Microsoft Purview and a named feature. In that case, the named feature often wins if it directly addresses the requirement.

The portal also helps you keep product boundaries clean. Microsoft Entra handles identity and access topics such as authentication, Conditional Access, roles, governance, and identity protection. Microsoft Defender solutions handle security posture, workload protection, endpoint protection, app discovery and control, threat intelligence, and related protection tasks. Microsoft Sentinel handles SIEM and SOAR. Microsoft Purview handles compliance and data governance topics.

For SC-900, practice mapping words to families:

• Compliance score, assessments, and improvement actions map to Compliance Manager.
• Privacy-focused requirements map to Microsoft Priva.
• Trust and assurance information maps to Service Trust Portal.
• Labels, data loss prevention, retention, eDiscovery, and audit map to Microsoft Purview data controls.
• SIEM, SOAR, analytics, incidents, and playbooks map to Microsoft Sentinel.

The most reliable technique is to read the noun and the verb together. A noun such as data is not enough, because many products touch data in some way. The verb tells you whether the organization wants to classify, retain, discover, audit, protect, monitor, or score. Microsoft Purview is broad, but each Purview capability has a different verb.