Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Medium
A Microsoft 365 administrator needs to ensure that specific sensitive data, such as credit card numbers or social security numbers, is not accidentally or maliciously shared outside the organization via email, SharePoint, or Teams. The solution must be able to automatically identify this data and prevent its unauthorized transmission. Which Microsoft 365 compliance feature is designed for this purpose?
- AMicrosoft Purview eDiscovery
- BMicrosoft Purview Information Protection
- CMicrosoft Purview Data Loss Prevention (DLP)
- DMicrosoft Purview Records Management
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Purview Data Loss Prevention (DLP)
Microsoft Purview Data Loss Prevention (DLP) policies are designed to identify, monitor, and automatically protect sensitive information across Microsoft 365 services. It can detect specific sensitive information types (like credit card numbers) and prevent their sharing based on defined rules.
Why the other options are wrong
- A. Microsoft Purview eDiscovery focuses on finding and collecting electronic data for legal cases.
- B. Microsoft Purview Information Protection is used for classifying and labeling data, and then encrypting it, but DLP actively prevents sharing based on content.
- D. Microsoft Purview Records Management manages the retention and disposal of organizational records.
Microsoft Purview Data Loss Prevention (DLP)
A Microsoft 365 compliance solution that identifies, monitors, and automatically protects sensitive information across Microsoft 365 services and endpoints to prevent data exfiltration.
- Detects sensitive information types (SITs) like credit card numbers, SSNs.
- Applies policies to emails, SharePoint, OneDrive, Teams, and endpoints.
- Can block sharing, notify users/admins, and encrypt content.
- Helps comply with regulatory requirements for data protection.
Memory trick: Don't let sensitive data slip out.