Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft compliance solutionsHard

A global organization is concerned about employees accidentally or maliciously sharing sensitive customer data, such as credit card numbers or personally identifiable information (PII), with unauthorized external parties. They need a solution that can identify this sensitive information in emails, chat messages, and documents, and then prevent it from being shared outside the organization. Which Microsoft Purview capability directly addresses this need?

  1. AMicrosoft Purview Communication Compliance
  2. BMicrosoft Purview Information Barriers
  3. CMicrosoft Purview Data Loss Prevention (DLP)
  4. DMicrosoft Purview Records Management
Show answer & explanation

Correct answer: C. Microsoft Purview Data Loss Prevention (DLP)

Microsoft Purview Data Loss Prevention (DLP) is precisely designed to identify, monitor, and protect sensitive information from being shared inappropriately, either accidentally or maliciously, outside the organization.

Why the other options are wrong

  • A. Communication Compliance monitors internal and external communications for policy violations, but its primary role isn't to *prevent* the sharing of specific sensitive data types outside the organization.
  • B. Information Barriers prevent communication between *internal* user groups, not specifically preventing sensitive data from leaving the organization.
  • D. Records Management focuses on data retention and deletion, not on preventing sensitive data from being shared inappropriately.

Data Loss Prevention (DLP)

A Microsoft Purview capability that helps prevent sensitive information from being accidentally or maliciously shared outside the organization or with unauthorized internal users.

  • Detects sensitive information (e.g., PII, credit cards)
  • Monitors data across various locations (email, documents)
  • Enforces policies to block or warn against sharing

Memory trick: Don't let the sensitive data escape!

More Describe the capabilities of Microsoft compliance solutions questions