A global organization is using Microsoft 365 and needs to implement data loss prevention (DLP) for sensitive customer financial data stored in SharePoint Online and transmitted via Exchange Online. The DLP solution must identify specific patterns of credit card numbers and bank account numbers, trigger an alert to the security team, and automatically block the sharing or transmission of such data externally. Which Microsoft Defender XDR component provides the capabilities to configure such a DLP policy?
- AMicrosoft Defender for Office 365
- BMicrosoft Defender for Cloud Apps
- CMicrosoft Defender for Endpoint
- DMicrosoft Defender for Identity
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Defender for Office 365
Microsoft Defender for Office 365 (specifically, the DLP capabilities within the Microsoft 365 compliance center, which integrates with MDO) provides the functionality to create, manage, and enforce Data Loss Prevention policies for data at rest in SharePoint Online and data in transit through Exchange Online. It can detect sensitive information types like credit card numbers and apply actions like blocking external sharing/transmission.
Why the other options are wrong
- B. Microsoft Defender for Cloud Apps provides DLP capabilities, but for a broader range of cloud apps, whereas the question specifically points to SharePoint Online and Exchange Online, which are core to MDO's scope for DLP.
- C. Microsoft Defender for Endpoint focuses on endpoint device protection, not DLP for cloud services.
- D. Microsoft Defender for Identity protects Active Directory identities, not data loss prevention for cloud content.
DLP in Microsoft 365 (MDO context)
Data Loss Prevention (DLP) in the Microsoft 365 ecosystem, managed via the compliance center, provides capabilities to identify, monitor, and protect sensitive information across Microsoft 365 services like Exchange Online, SharePoint Online, and OneDrive for Business.
- Detects sensitive info types (e.g., credit card numbers).
- Can apply actions like blocking, encrypting, or alerting.
- Protects data at rest and in transit.
Memory trick: DLP in M365 is your data bodyguard for emails and documents.