A multinational corporation is designing a new customer relationship management (CRM) application on Azure. The application will store customer data across various Azure services, including Azure SQL Database and Azure Blob Storage. The company needs to classify and protect this data based on its sensitivity (e.g., 'Confidential', 'Highly Confidential'). This classification must be integrated with existing Microsoft 365 data governance policies and allow for consistent labeling and protection across both structured and unstructured data. Which Microsoft Purview capability should the architect recommend?
- AMicrosoft Purview Data Catalog
- BMicrosoft Purview Information Protection (Sensitivity Labels)
- CMicrosoft Purview Data Estate Insights
- DMicrosoft Purview Data Sharing
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Purview Information Protection (Sensitivity Labels)
Microsoft Purview Information Protection, leveraging Sensitivity Labels, allows organizations to classify and protect data across Azure services (like SQL Database and Blob Storage) and Microsoft 365. This ensures consistent data governance, protection, and policy enforcement based on data sensitivity, meeting the requirement for integrated classification and protection.
Why the other options are wrong
- A. Microsoft Purview Data Catalog is for discovering and understanding data assets, not for classifying and protecting data based on sensitivity.
- C. Microsoft Purview Data Estate Insights provides an overview of the data estate, but doesn't directly apply sensitivity labels or protection.
- D. Microsoft Purview Data Sharing enables secure data sharing with other organizations, not internal classification and protection.
Microsoft Purview Information Protection (Sensitivity Labels)
A capability within Microsoft Purview that allows organizations to classify and protect sensitive data across their entire digital estate (Azure, M365, on-premises) using sensitivity labels, enabling consistent data governance and policy enforcement.
- Extends Microsoft Information Protection (MIP) to Purview.
- Applies sensitivity labels to structured and unstructured data.
- Enforces policies like encryption, watermarking, and access restrictions.
- Provides a unified approach to data classification and protection.
Memory trick: Purview Labels: Tag and protect all your data.