Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Defender XDRHard
A Microsoft 365 administrator is implementing a new security policy that requires all sensitive documents shared externally via SharePoint Online or OneDrive for Business to be automatically encrypted and restricted from further sharing or downloading by unauthorized recipients. Which Microsoft Defender XDR component, in conjunction with Microsoft Purview Information Protection, should the administrator leverage?
- AMicrosoft Defender for Cloud Apps
- BMicrosoft Defender for Office 365
- CMicrosoft Defender for Identity
- DMicrosoft Defender for Endpoint
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps integrates with Microsoft Purview Information Protection to apply real-time controls and policies on sensitive files shared or uploaded to cloud apps like SharePoint Online and OneDrive, ensuring encryption and access restrictions.
Why the other options are wrong
- B. Microsoft Defender for Office 365 primarily protects against email-borne threats (phishing, malware, spam) and does not directly enforce information protection for files in SharePoint/OneDrive.
- C. Microsoft Defender for Identity protects against identity-based threats and is not involved in file-level encryption or sharing restrictions in cloud storage.
- D. Microsoft Defender for Endpoint focuses on securing devices and is not directly involved in applying information protection policies to files within cloud storage.
Defender for Cloud Apps with Purview Information Protection
Microsoft Defender for Cloud Apps integrates with Microsoft Purview Information Protection to enforce data protection policies, including encryption and access controls, on sensitive files shared or stored in cloud applications.
- Extends Purview Information Protection labels and policies to cloud apps.
- Enables real-time control over file activities (upload, download, share).
- Prevents data exfiltration and ensures compliance in cloud environments.
- Applies to SharePoint, OneDrive, and other connected cloud storage services.
Memory trick: To protect CLOUD files with Purview, use CLOUD APPS.