Microsoft 365 Certified: Administrator Expert flashcards

Microsoft Purview Multi-Geo allows multinational organizations to provision and store Microsoft 365 data (Exchange, SharePoint, OneDrive) in specific geographic locations (data centers) to meet data residency requirements.

• Addresses data residency for global organizations.
• Applies to Exchange, SharePoint, OneDrive.
• Requires an eligible Microsoft 365 enterprise subscription.

Memory trick: Geo-fence your data, keep it where it's stated.

A Microsoft Purview solution that provides end-to-end workflow to identify, preserve, collect, process, review, and analyze data for legal and investigative matters within Microsoft 365.

• Includes custodian management and advanced analytics.
• Supports processing, review, and redaction.
• Essential for complex legal and regulatory investigations.

Memory trick: eDiscovery Premium is the 'Premium' tool for 'Probing' into legal mysteries!

Microsoft Purview Insider Risk Management helps organizations detect, investigate, and act on malicious and inadvertent insider activities that pose a risk to sensitive data and assets.

• Identifies risky user behaviors (e.g., large downloads, data sharing).
• Uses signals from Microsoft 365 services.
• Provides alerts and investigation tools.

Memory trick: Insider risks are caught, before data is naught.

Microsoft Purview allows administrators to configure retention policies specifically for unified audit logs, ensuring that records of user and administrative activities are preserved for compliance and investigative purposes.

• Separate from content retention policies.
• Retains records of activities across M365 services.
• Crucial for forensic investigations and compliance audits.

Memory trick: Audit logs: Keep the record, know the story!

Microsoft Purview Sensitivity Labels enable classification, encryption, visual markings, and granular access controls for documents, emails, and containers, ensuring persistent protection regardless of location or sharing.

• Applies classification and protection directly to content.
• Includes encryption, visual markings, and access restrictions.
• Can prevent external sharing and extend to containers (sites/groups).

Memory trick: Labels 'stick' to your data, protecting it everywhere it goes, even outside!

Microsoft Purview Communication Compliance policies help organizations detect, capture, and act on inappropriate messages in Microsoft 365, including monitoring for specific keywords, phrases, and types of content across various communication channels.

• Monitors Exchange, Teams, Yammer communications.
• Detects policy violations (e.g., harassment, sensitive data, ethical breaches).
• Provides alerts and review workflows.

Memory trick: Communicate wisely, compliance is highly.

eDiscovery (Standard) allows legal teams to create cases, identify, preserve, collect, and review content across Microsoft 365 for legal investigations or regulatory requests.

• Places legal holds on specific custodians/locations.
• Preserves content immutably.
• Facilitates searching and exporting of relevant data.

Memory trick: eDiscovery: Find the evidence, lock it down, and review!

Custom Sensitive Information Types (SITs) allow organizations to define unique patterns for sensitive data. Auto-labeling policies then use these SITs to automatically apply sensitivity labels to content, enforcing protection actions like encryption.

• Custom SITs detect unique data patterns.
• Auto-labeling applies labels based on SIT detection.
• Labels enforce protection (encryption, watermarking).

Memory trick: Custom patterns trigger auto-labels, keeping data safe.

Sensitivity labels applied to containers (SharePoint sites, Teams, Microsoft 365 Groups) allow organizations to enforce access controls, external sharing restrictions, and other settings directly on the container and its content.

• Applies labels to SharePoint sites, Teams, M365 Groups.
• Enforces access control (public/private, specific groups).
• Can restrict external sharing, unmanaged device access.

Memory trick: Labels protect the container, excluding the strainer.

A retention policy that uses specific keywords or properties to identify and preserve content across Microsoft 365 workloads, ensuring that only relevant items are retained based on defined criteria.

• Automatically identifies content based on keywords/properties.
• Applies retention to existing and new matching content.
• Efficiently preserves specific types of data for legal or regulatory needs.

Memory trick: Keywords in, retention wins!

A Microsoft Purview feature that allows the retention period for content to begin only after a specific, formally logged event occurs, rather than from content creation or modification.

• Retention start is triggered by an event.
• Requires defining event types and asset IDs.
• Crucial for regulatory compliance tied to business events.

Memory trick: Events make retention start 'when' something happens, not 'just because' it was born.

Labels applied to content (documents, emails) to classify it and enforce protection actions like encryption and usage restrictions, which persist with the content.

• Classify data based on sensitivity.
• Apply encryption and access restrictions (e.g., Do Not Forward, Do Not Print).
• Protection persists with the content, even when shared externally.
• Integrates with Microsoft Office apps.

Memory trick: Labels tag and lock your secrets, even when they travel.

A feature in Microsoft 365 that allows organizations to provision and store user data at rest in specified data center geographies (Geo locations) to meet data residency requirements.

• Enables data residency for Exchange, SharePoint, OneDrive, Teams.
• Data at rest for specific users/groups stored in chosen Geo locations.
• Manages data residency within a single Microsoft 365 tenant.
• Crucial for compliance with local regulatory requirements.

Memory trick: Multi-Geo: Data stays local, no matter the global tenant.

A Microsoft Purview compliance solution that prevents designated groups of users from communicating or collaborating with other groups within an organization.

• Prevents unauthorized communication between user segments.
• Applies to Microsoft Teams, SharePoint, OneDrive, Exchange Online.
• Crucial for preventing conflicts of interest or protecting sensitive info.
• Requires segmenting users based on attributes.

Memory trick: IB: Information Barriers build walls between your teams.

Auto-apply retention label policies can be configured to automatically apply a specific retention label to all content in designated locations, such as a SharePoint Online library or folder, ensuring consistent data governance.

• Automatically applies retention labels.
• Can be based on content properties or location.
• Ensures consistent retention without user action.

Memory trick: Location labels: Set it and forget it, for every 'doc' in that spot!

An advanced Microsoft Purview solution that provides an end-to-end workflow for managing legal cases, including identification, preservation, collection, processing, review, and analysis of electronic data.

• Offers advanced legal hold capabilities.
• Includes targeted collection, deduplication, and processing.
• Provides review sets, analytics, and tagging for efficient review.
• Crucial for complex legal investigations and regulatory responses.

Memory trick: eDiscovery Premium: Your legal team's ultimate investigation toolkit.

A legal hold capability within Microsoft Purview eDiscovery Premium that places an immutable, indefinite hold on data across various Microsoft 365 services for specific custodians, preserving content for litigation.

• Provides immutable preservation for litigation.
• Applies to Exchange, SharePoint, OneDrive, Teams, etc.
• Ensures no content is permanently deleted or modified.
• Part of the advanced capabilities in eDiscovery Premium.

Memory trick: Premium holds are the ultimate legal fortress for your data.

A Microsoft Purview feature that automatically applies a retention label to content based on specific conditions, such as sensitive information types, keywords, or existing sensitivity labels, eliminating the need for manual user action.

• Automates retention label application.
• Conditions can include SITs, keywords, sensitivity labels.
• Ensures consistent retention across large datasets.

Memory trick: Auto-apply labels are like a 'Robot' that 'Stamps' the right retention on your files!

Microsoft Purview Insider Risk Management helps organizations detect, investigate, and act on malicious and inadvertent insider activities that could lead to data theft, data leakage, or regulatory compliance violations.

• Correlates various signals (e.g., activity logs, HR data).
• Identifies risky user behaviors, especially for departing employees.
• Provides dashboards and alerts for investigation.

Memory trick: Insider Risk: Watch the 'inside' moves!

A Microsoft Purview Data Loss Prevention capability that extends DLP policies to Windows and macOS devices, enabling monitoring and protection of sensitive information as it's used and shared on endpoints.

• Prevents data transfer to USB, network shares, cloud services, print.
• Applies to Windows and macOS devices.
• Requires device onboarding to Microsoft 365 Defender.

Memory trick: DLP for Endpoints: 'Don't Let Personal data Leave' your computer!

A Microsoft Purview retention policy configured with a preservation lock ensures that content cannot be deleted or modified by anyone, including administrators, for the duration of the policy.

• Ensures immutability of data.
• Prevents content deletion/modification.
• Meets strict regulatory compliance for data preservation.

Memory trick: Lock your records tight, for years they must stay right.

Microsoft Purview policies that automatically apply sensitivity labels to content in SharePoint, OneDrive, and Exchange based on predefined conditions like sensitive information types or keywords.

• Automates sensitivity label application.
• Targets content at rest or in transit.
• Uses conditions like SITs, keywords, or trainable classifiers.
• Reduces reliance on manual user classification.

Memory trick: Auto-labeling: Your data gets tagged, no human needed.

Automation rules in Microsoft Defender Vulnerability Management allow for the automatic assignment of security recommendations and the triggering of notifications based on defined conditions such as vulnerability severity, asset tags, or recommendation types.

• Automate remediation task assignment.
• Trigger notifications for critical vulnerabilities.
• Based on conditions like severity or asset tags.
• Streamlines vulnerability management workflows.

Memory trick: Automated rules bring order to vulnerability chaos, assigning tasks and alerting the guards.

Microsoft Teams private channel messages can be retained using Purview retention policies, ensuring data immutability and compliance with regulatory requirements.

• Private channel messages are stored in a separate mailbox associated with the private channel.
• Retention policies can be configured specifically for 'Microsoft Teams private channel messages'.
• Preservation Lock prevents anyone, including administrators, from turning off the policy or deleting content prematurely.

Memory trick: Private messages need a locked-down, specific plan.

Microsoft 365 E5 subscriptions allow organizations to define custom retention policies for audit logs, extending retention periods beyond the default for compliance.

• Available with Microsoft 365 E5 or Purview Audit Premium.
• Allows setting retention durations up to 10 years for most activities.
• Configured in the Microsoft Purview compliance portal.

Memory trick: E5 unlocks the power to customize log timelines.