Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityHard
A large organization with a complex IT environment needs to ensure that sensitive data stored across various cloud services (e.g., Office 365, Azure, third-party SaaS apps) is discovered, classified, and protected according to regulatory requirements. They need a solution that can identify sensitive information like credit card numbers or personal identifiable information (PII) wherever it resides. Which security concept is this related to?
- APrivileged Identity Management (PIM)
- BCloud Access Security Broker (CASB)
- CInformation Protection
- DIdentity Governance
Show answer & explanationAnswer & explanation
Correct answer: C. Information Protection
Information Protection focuses on discovering, classifying, labeling, and protecting sensitive data across an organization's digital estate, regardless of location. This includes identifying specific types of sensitive information like PII and credit card numbers.
Why the other options are wrong
- A. PIM manages and monitors privileged access to critical resources, not general data classification and protection.
- B. CASB focuses on monitoring and securing access to cloud services, not primarily on discovering and classifying sensitive data within them.
- D. Identity Governance manages the lifecycle of identities and access rights, not the data itself.
Information Protection
A comprehensive strategy and set of technologies for identifying, classifying, labeling, and protecting sensitive data throughout its lifecycle.
- Discovers sensitive data across disparate sources.
- Applies labels and encryption based on sensitivity.
- Helps comply with data privacy regulations.
Memory trick: Information Protection finds, labels, and locks your data.