Microsoft 365 Endpoint AdministratorManage identity and compliance (10-15%)Medium
A Microsoft 365 Endpoint Administrator is configuring a new sensitivity label in Microsoft Purview. The label needs to automatically apply to documents that contain credit card numbers. Which automatic labeling method should the administrator configure?
- AClient-side automatic labeling
- BAzure Information Protection (AIP) scanner
- CEndpoint Data Loss Prevention (DLP)
- DService-side automatic labeling
Show answer & explanationAnswer & explanation
Correct answer: D. Service-side automatic labeling
Service-side automatic labeling applies sensitivity labels to content at rest in SharePoint Online, OneDrive for Business, and Exchange Online based on content matching rules, such as detecting credit card numbers.
Why the other options are wrong
- A. Client-side automatic labeling applies labels as users create or edit documents in Office apps, not for content already stored.
- B. The AIP scanner is for on-premises file shares and SharePoint Server, not for content in Microsoft 365 cloud services.
- C. Endpoint DLP prevents data from leaving endpoints, it doesn't automatically apply sensitivity labels.
Service-Side Automatic Labeling
A Microsoft Purview feature that automatically applies sensitivity labels to content at rest in cloud services (e.g., SharePoint, OneDrive, Exchange) based on defined conditions.
- Applies labels to existing content in cloud locations.
- Uses sensitive information types (SITs) for detection.
- Does not require user interaction for application.
Memory trick: Services in the cloud automatically label data sitting there.