Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Medium
A global enterprise uses Microsoft 365 and needs to ensure that specific types of sensitive information, such as credit card numbers or social security numbers, are not accidentally shared outside the organization through email, Teams messages, or SharePoint documents. The company also wants to be notified when such incidents occur. Which Microsoft 365 feature is best suited to prevent this data leakage?
- AMicrosoft Purview Data Loss Prevention (DLP)
- BMicrosoft Purview Information Barriers
- CMicrosoft Purview eDiscovery
- DMicrosoft Purview Compliance Manager
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Purview Data Loss Prevention (DLP)
Microsoft Purview Data Loss Prevention (DLP) policies are designed to identify, monitor, and automatically protect sensitive information across Microsoft 365 services, preventing unauthorized sharing and notifying administrators of policy violations.
Why the other options are wrong
- B. Information Barriers prevent communication between specific groups within an organization, not the external sharing of sensitive data.
- C. eDiscovery is used for searching and exporting content for legal cases, not for proactively preventing data leakage.
- D. Compliance Manager helps manage regulatory compliance posture and provides recommendations, but does not directly prevent data leakage in real-time.
Microsoft Purview Data Loss Prevention (DLP)
DLP policies in Microsoft Purview identify, monitor, and automatically protect sensitive information across Microsoft 365 services to prevent accidental or malicious sharing outside the organization.
- Uses sensitive information types (SITs) to detect specific data patterns.
- Can apply to Exchange, SharePoint, OneDrive, Teams, and Endpoint devices.
- Allows for actions like blocking sharing, notifying users, and generating incident reports.
Memory trick: DLP: Don't Let it Pass!