Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Medium
A company is concerned about its employees accidentally or maliciously sharing sensitive customer data, such as credit card numbers or personally identifiable information (PII), outside the organization through email or cloud storage. They need a proactive solution that can identify, monitor, and automatically prevent this type of data exfiltration. Which Microsoft 365 security capability should be implemented?
- AMicrosoft Purview Information Protection (MPIP)
- BMicrosoft Purview Records Management
- CMicrosoft 365 Defender for Cloud Apps
- DMicrosoft Purview Data Loss Prevention (DLP)
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Purview Data Loss Prevention (DLP)
Microsoft Purview Data Loss Prevention (DLP) policies are designed to identify, monitor, and automatically protect sensitive information across Microsoft 365 services, preventing it from being shared inappropriately, either internally or externally, which directly addresses the concern of data exfiltration.
Why the other options are wrong
- A. MPIP classifies and protects sensitive data, but DLP is specifically designed to prevent its loss or inappropriate sharing based on defined policies.
- B. Records Management focuses on managing the lifecycle of records for legal and regulatory compliance, not on preventing real-time data loss scenarios.
- C. Defender for Cloud Apps provides visibility into cloud apps and helps protect against shadow IT and threats, but DLP is more focused on the content of data and preventing its specific exfiltration.
Microsoft Purview Data Loss Prevention (DLP)
A compliance solution in Microsoft 365 that identifies, monitors, and automatically protects sensitive information across various Microsoft 365 services, preventing its unauthorized sharing.
- Detects sensitive information based on content and context.
- Can block sharing, encrypt, or notify users/admins.
- Applies across Exchange, SharePoint, OneDrive, Teams, and endpoints.
Memory trick: DLP is the digital bouncer, stopping sensitive data from leaving the party without permission.