Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Medium
A startup company is concerned about its intellectual property (IP) being leaked by employees, either intentionally or accidentally. They want a Microsoft 365 solution that can identify unusual employee activities that might indicate data exfiltration, such as downloading large amounts of sensitive data or emailing it to personal accounts. Which Microsoft 365 capability best addresses this concern?
- AMicrosoft Purview Data Loss Prevention (DLP)
- BMicrosoft Purview eDiscovery
- CMicrosoft Purview Insider Risk Management
- DMicrosoft 365 Defender for Endpoint
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Purview Insider Risk Management
Microsoft Purview Insider Risk Management uses data from Microsoft 365 services to identify, investigate, and act on malicious and inadvertent insider activities, specifically designed to detect data exfiltration and other risky behaviors by employees.
Why the other options are wrong
- A. DLP prevents sensitive data from leaving the organization but doesn't primarily focus on identifying patterns of risky user behavior that might precede or indicate an insider threat.
- B. eDiscovery is used for legal hold and data retrieval, not for proactive detection of insider threats.
- D. Defender for Endpoint focuses on endpoint security (devices) and threat detection, not specifically on identifying insider risks from user behavior patterns across Microsoft 365 services.
Microsoft Purview Insider Risk Management
A compliance solution in Microsoft 365 that helps detect, investigate, and act on malicious and inadvertent activities inside an organization that can lead to data leakage or theft.
- Uses machine learning to identify risky user behavior patterns.
- Integrates with Microsoft 365 services.
- Helps mitigate data exfiltration and other insider threats.
Memory trick: Insider Risk Management is the watchful eye on employees to prevent data from walking out the door.