Microsoft 365 Certified: Administrator ExpertDeploy and manage a Microsoft 365 tenantEasy
A Microsoft 365 administrator is setting up a new tenant. The organization requires that all user data, including Exchange Online mailboxes and SharePoint Online sites, reside within a specific geographic region to comply with data residency regulations. Which Microsoft 365 feature should the administrator configure to meet this requirement?
- AMicrosoft 365 Multi-Geo capabilities
- BMicrosoft Purview Data Loss Prevention (DLP)
- CAzure AD Conditional Access policies
- DAzure Information Protection (AIP)
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft 365 Multi-Geo capabilities
Microsoft 365 Multi-Geo is specifically designed to allow organizations to provision and store data at rest in specified geographic locations. This directly addresses data residency requirements for various Microsoft 365 workloads.
Why the other options are wrong
- B. DLP policies prevent sensitive data from leaving the organization but do not manage where data is physically stored.
- C. Conditional Access policies control access to resources based on conditions but do not dictate data residency.
- D. AIP is used for classifying, labeling, and protecting documents and emails, not for controlling data residency.
Microsoft 365 Multi-Geo
A Microsoft 365 capability that allows organizations to expand their Microsoft 365 presence to multiple geographic regions, enabling data residency compliance.
- Stores data at rest in specified geographic locations.
- Supports core Microsoft 365 workloads like Exchange, SharePoint, and OneDrive.
- Requires an eligible Microsoft 365 subscription and sufficient licenses.
Memory trick: Think of Multi-Geo as a global vault, securing your data in its home country.