Microsoft 365 FundamentalsDescribe Microsoft 365 pricing and supportHard
A Microsoft 365 administrator wants to implement a policy that automatically encrypts emails containing sensitive financial data when sent outside the organization. Which Microsoft 365 feature or add-on is primarily responsible for this capability?
- AMicrosoft Defender for Office 365
- BMicrosoft Purview Information Protection (MPIP)
- CAzure Active Directory (Azure AD) Identity Protection
- DExchange Online Protection (EOP)
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Purview Information Protection (MPIP)
Microsoft Purview Information Protection (MPIP), which includes sensitivity labels and encryption, is the primary feature used to classify, label, and automatically protect (e.g., encrypt) sensitive information like financial data, even when shared externally.
Why the other options are wrong
- A. Microsoft Defender for Office 365 provides advanced threat protection against phishing, malware, and other email-borne threats, not automatic content-based encryption.
- C. Azure AD Identity Protection focuses on securing user identities and detecting compromised accounts, not content-based email encryption.
- D. EOP primarily focuses on anti-malware and anti-spam filtering for incoming and outgoing email.
Microsoft Purview Information Protection (MPIP)
A solution that helps organizations discover, classify, and protect sensitive information across its lifecycle, including emails and documents.
- Uses sensitivity labels for classification and protection.
- Supports encryption, access control, and visual markings.
- Integrates with Microsoft 365 apps and services.
Memory trick: Purview protects content, Defender shields threats, EOP filters mail.