Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Hard
A company is concerned about insider risks, specifically employees potentially leaking sensitive data or engaging in harassment. They need a system that can detect and investigate these activities within Microsoft Teams, Exchange Online, and SharePoint Online. Which Microsoft 365 compliance solution provides these capabilities?
- AMicrosoft Purview eDiscovery
- BAzure AD Identity Protection
- CMicrosoft Purview Insider Risk Management
- DData Loss Prevention (DLP)
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Purview Insider Risk Management
Microsoft Purview Insider Risk Management helps organizations detect, investigate, and act on malicious and inadvertent activities by users that could lead to data leakage, data theft, or other policy violations, specifically designed for internal threats.
Why the other options are wrong
- A. eDiscovery is for legal discovery, not proactive insider risk detection and investigation.
- B. Azure AD Identity Protection focuses on securing user identities from external threats, not internal behavioral risks.
- D. DLP prevents data loss, but Insider Risk Management provides a broader scope for detection, investigation, and case management of various insider threats.
Microsoft Purview Insider Risk Management
A Microsoft 365 solution that helps organizations detect, investigate, and act on malicious and inadvertent activities by users that could lead to data leakage, data theft, or other policy violations.
- Uses machine learning to identify risky user activities.
- Provides customizable policies and alert generation.
- Offers investigation tools and case management for insider threats.
Memory trick: Manage INSIDER Risks with intelligence and alerts.