Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft compliance solutionsEasy
A company is implementing Microsoft Purview and needs to ensure that sensitive financial data, such as credit card numbers, is not inadvertently shared outside the organization. Which Microsoft Purview capability should they configure to automatically detect and prevent this type of data exfiltration?
- ACommunication Compliance
- BRecords Management
- CData Loss Prevention (DLP)
- DInformation Barriers
Show answer & explanationAnswer & explanation
Correct answer: C. Data Loss Prevention (DLP)
Data Loss Prevention (DLP) policies are designed to identify, monitor, and automatically protect sensitive information across Microsoft 365 services, preventing its unauthorized sharing.
Why the other options are wrong
- A. Communication Compliance helps detect inappropriate or non-compliant communications within the organization, not specifically data exfiltration.
- B. Records Management focuses on retaining and disposing of information according to regulations, not preventing sensitive data from leaving the organization.
- D. Information Barriers prevent communication and collaboration between specific user groups, not directly data exfiltration of sensitive information.
Data Loss Prevention (DLP)
A set of policies and technologies designed to identify, monitor, and protect sensitive information from unauthorized access, use, or transfer.
- Prevents sensitive data from leaving the organization.
- Uses sensitive info types, labels, and conditions.
- Applies across various Microsoft 365 services.
Memory trick: Don't Let Private Data Leak (DLP)