Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsHard
A financial institution is implementing a new data governance strategy. They need to categorize sensitive data (e.g., credit card numbers, personal identifiable information), encrypt it, and apply retention labels across various Microsoft 365 services, including SharePoint Online, OneDrive, and Exchange Online. Which Microsoft security solution provides these capabilities?
- AMicrosoft Purview Information Protection
- BAzure Firewall
- CMicrosoft Defender for Cloud
- DMicrosoft Defender for Office 365
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Purview Information Protection
Microsoft Purview Information Protection (formerly Microsoft Information Protection) is designed for data classification, labeling, and protection. It allows organizations to discover, classify, protect, and govern sensitive information across Microsoft 365 services and beyond.
Why the other options are wrong
- B. Azure Firewall is a network security service that protects Azure virtual network resources, not data within M365 applications.
- C. Microsoft Defender for Cloud focuses on cloud security posture and workload protection, not data classification and labeling within M365 services.
- D. Microsoft Defender for Office 365 protects against email-borne threats, not data classification and governance.
Microsoft Purview Information Protection (MPIP)
A unified solution for discovering, classifying, labeling, and protecting sensitive information across its lifecycle, within Microsoft 365 and hybrid environments.
- Applies sensitivity labels for classification and encryption
- Integrates with Data Loss Prevention (DLP)
- Supports data discovery and governance across M365 services
Memory trick: Purview protects data's journey.