Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Purview complianceMedium
A global enterprise needs to ensure that specific sensitive information types (SITs) unique to their industry, such as 'Proprietary Project ID' (e.g., 'PROJ-XYZ-2023-001') or 'Client Confidential Code' (e.g., 'CLNT-ABC-SECURE'), are consistently identified across all Microsoft 365 workloads. These SITs are not covered by the default Microsoft Purview SITs. What should an administrator implement?
- AImplement Communication Compliance policies to monitor for these specific terms.
- BCreate custom sensitive information types (SITs) with appropriate patterns and keywords.
- CTrain employees to manually apply sensitivity labels for these custom types.
- DConfigure a DLP policy using keyword dictionaries for the proprietary terms.
Show answer & explanationAnswer & explanation
Correct answer: B. Create custom sensitive information types (SITs) with appropriate patterns and keywords.
Custom sensitive information types (SITs) allow administrators to define unique patterns, keywords, and proximity rules to accurately identify specific sensitive data that is not covered by the default SITs, ensuring consistent detection across all workloads.
Why the other options are wrong
- A. Communication Compliance monitors for policy violations but relies on SITs (default or custom) or keyword lists for identification, so creating the SITs is a prerequisite for robust detection.
- C. Manual labeling is prone to human error and inconsistency, not scalable for comprehensive detection.
- D. While keyword dictionaries can be part of a DLP policy, creating a full custom SIT provides more robust and accurate detection with patterns, confidence levels, and proximity rules.
Custom Sensitive Information Types (SITs)
Custom sensitive information types (SITs) allow organizations to define their own patterns, keywords, and rules to identify unique or proprietary sensitive data within Microsoft 365.
- Extends default SIT capabilities.
- Uses regular expressions, keyword lists, and confidence levels.
- Enables detection of industry-specific or company-specific sensitive data.
Memory trick: Custom SITs: Your unique data, your unique fit!