Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Purview complianceMedium
A construction company uses Microsoft 365 and needs to ensure that sensitive project blueprints, identified by a unique 'Project Code' (e.g., 'BLU-2023-001'), are always encrypted and watermarked when shared externally. These blueprints are stored in SharePoint Online. The company wants to automate the application of sensitivity labels based on the presence of these project codes within the documents. Which combination of features should be configured?
- ACustom Sensitive Information Types (SITs) and auto-labeling policies
- BData Loss Prevention (DLP) policies and Communication Compliance
- CeDiscovery holds and audit log retention
- DInformation Barriers (IB) and adaptive scopes
Show answer & explanationAnswer & explanation
Correct answer: A. Custom Sensitive Information Types (SITs) and auto-labeling policies
Custom Sensitive Information Types (SITs) can be created to detect the unique 'Project Code'. Auto-labeling policies then use these SITs to automatically apply the appropriate sensitivity label, which can enforce encryption and watermarking.
Why the other options are wrong
- B. DLP prevents sharing, and Communication Compliance monitors, but neither automates label application based on content.
- C. eDiscovery holds preserve data for legal cases, and audit logs track activities; neither automates content labeling and protection.
- D. Information Barriers restrict communication, and adaptive scopes dynamically target policies, neither automates content labeling.
Custom SITs & Auto-labeling
Custom Sensitive Information Types (SITs) allow organizations to define unique patterns for sensitive data. Auto-labeling policies then use these SITs to automatically apply sensitivity labels to content, enforcing protection actions like encryption.
- Custom SITs detect unique data patterns.
- Auto-labeling applies labels based on SIT detection.
- Labels enforce protection (encryption, watermarking).
Memory trick: Custom patterns trigger auto-labels, keeping data safe.