Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Purview complianceEasy
A large pharmaceutical company needs to ensure that no documents containing patient health information (PHI) are ever shared outside the organization. This policy must apply to all email, SharePoint, OneDrive, and Teams communications. Additionally, the policy should alert security administrators and block the sharing attempt. Which Microsoft Purview feature is best suited for this requirement?
- ASensitivity Labels
- BInformation Barriers
- CData Loss Prevention (DLP) Policies
- DCommunication Compliance
Show answer & explanationAnswer & explanation
Correct answer: C. Data Loss Prevention (DLP) Policies
Data Loss Prevention (DLP) policies are specifically designed to detect sensitive information like PHI and prevent its unauthorized sharing outside the organization across various Microsoft 365 services, with options to block and alert.
Why the other options are wrong
- A. Sensitivity Labels classify and protect data but require DLP or other enforcement mechanisms to actively block sharing attempts.
- B. Information Barriers prevent communication between specific internal groups, not external sharing of sensitive data.
- D. Communication Compliance monitors internal communications for policy violations, not primarily preventing external data sharing.
Data Loss Prevention (DLP)
Microsoft Purview Data Loss Prevention (DLP) prevents sensitive information from being shared inappropriately, either accidentally or maliciously, across various locations and applications.
- Identifies sensitive information based on SITs (e.g., PHI).
- Monitors data in transit and at rest.
- Can block sharing, alert users, or audit activities.
Memory trick: DLP: Don't Let PHI Pass!