Microsoft 365 Endpoint AdministratorManage identity and compliance (10-15%)Hard
A company policy requires that all documents saved to OneDrive for Business from corporate-managed Windows devices must be encrypted. You need to implement a solution that automatically enforces this encryption for new and existing files. Which Microsoft 365 compliance feature should you configure?
- AData Loss Prevention (DLP) policies
- BRetention policies
- CeDiscovery cases
- DSensitivity labels
Show answer & explanationAnswer & explanation
Correct answer: D. Sensitivity labels
Sensitivity labels from Microsoft Purview Information Protection can be configured to automatically apply encryption and other protection settings to documents as they are saved or created in locations like OneDrive for Business, ensuring data is protected at rest and in transit.
Why the other options are wrong
- A. DLP policies prevent sensitive information from being shared inappropriately, but don't inherently enforce encryption on all documents saved to OneDrive.
- B. Retention policies manage how long data is kept or deleted, not its encryption status.
- C. eDiscovery cases are for identifying and producing electronic information for legal purposes, not for enforcing data encryption.
Sensitivity Labels (Microsoft Purview)
Labels that classify and protect organizational data, allowing for the automatic application of encryption, access restrictions, visual markings, and other protection settings based on data sensitivity.
- Part of Microsoft Purview Information Protection (MPIP).
- Can be applied manually by users or automatically by policies.
- Enforce protection like encryption and access control, persistent with the data.
Memory trick: Label it right, encrypt it tight, keep your data out of sight.