Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsHard
A large university relies heavily on Microsoft Teams and SharePoint for collaboration among faculty and students. They need to ensure that sensitive research data shared within these platforms is protected from accidental leakage or unauthorized access. The solution must identify, classify, and protect sensitive information across these collaboration services. Which Microsoft security solution is best suited for this task?
- AMicrosoft Purview Information Protection
- BMicrosoft Defender for Cloud Apps
- CMicrosoft Defender for Endpoint
- DAzure Active Directory Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Purview Information Protection
Microsoft Purview Information Protection (formerly Azure Information Protection) is designed to classify, label, and protect sensitive documents and emails across Microsoft 365 services like Teams and SharePoint, preventing data leakage and ensuring compliance.
Why the other options are wrong
- B. Microsoft Defender for Cloud Apps provides CASB functionality but MPIP offers more granular, built-in information protection for M365 content.
- C. Microsoft Defender for Endpoint protects devices from threats, not sensitive data classification and protection within collaboration platforms.
- D. Azure Active Directory Identity Protection focuses on identity-based risks, not content protection.
Microsoft Purview Information Protection
A solution that helps discover, classify, label, and protect sensitive information across its lifecycle.
- Integrates with Microsoft 365 apps and services.
- Enables manual, recommended, or automatic labeling.
- Applies encryption, visual markings, and access restrictions.
Memory trick: Purview IP is the 'librarian' for your sensitive M365 documents, classifying and locking them up.