A research institution collaborates with external partners on highly sensitive projects. They need to ensure that project-specific SharePoint sites are only accessible by authorized internal staff and specific external guest users who have signed NDAs. Furthermore, all content within these sites must be encrypted, and external sharing must be restricted to only the authorized guest users. Which combination of Microsoft Purview features is most effective for this scenario?
- AAzure AD B2B collaboration with sensitivity labels and external sharing controls
- BData Loss Prevention (DLP) policies and Communication Compliance
- CAdaptive scopes for retention and eDiscovery holds
- DSensitivity labels with auto-labeling and Information Barriers (IB)
Show answer & explanationAnswer & explanation
Correct answer: A. Azure AD B2B collaboration with sensitivity labels and external sharing controls
Azure AD B2B collaboration allows secure access for external guest users. Sensitivity labels (with container management) can enforce encryption on site content and restrict external sharing to specific authorized users. External sharing controls in SharePoint further refine who can share and with whom.
Why the other options are wrong
- B. DLP prevents data loss, and Communication Compliance monitors, but neither directly manages external access to sites or container-level encryption/sharing restrictions for specific guests.
- C. Adaptive scopes target policies, and eDiscovery holds preserve data; neither addresses external collaboration security requirements.
- D. IB would prevent communication between internal and external users, which is contrary to collaboration needs, and auto-labeling alone doesn't manage external access.
Azure AD B2B, Sensitivity Labels (Container), External Sharing Controls
This combination provides secure collaboration with external users. Azure AD B2B manages guest access. Sensitivity labels applied to containers (SharePoint sites, Teams) enforce encryption and access restrictions. External sharing controls within SharePoint fine-tune sharing capabilities.
- Azure AD B2B for secure guest access.
- Sensitivity labels for container protection (site encryption, access).
- SharePoint external sharing controls for granular permissions.
Memory trick: B2B brings guests, labels protect, sharing is blessed.