Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureMedium
A global consulting firm is implementing a Zero Trust strategy. They want to ensure that all sensitive client data, regardless of where it is stored or shared (e.g., SharePoint, Teams, email, local drives), is classified, protected, and its usage is monitored. The solution must allow for automatic labeling and encryption based on content, and provide persistent protection even when data leaves the organizational boundary. Which Microsoft technology best addresses these requirements?
- AAzure Private Link
- BMicrosoft Entra Identity Governance
- CMicrosoft Purview Information Protection
- DMicrosoft Defender for Endpoint
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Purview Information Protection
Microsoft Purview Information Protection (formerly Azure Information Protection) is designed to classify, label, and protect sensitive data across various locations and applications, providing persistent protection even when data is shared externally, which is critical for a Zero Trust data strategy.
Why the other options are wrong
- A. Azure Private Link provides private connectivity to Azure services over the Microsoft backbone network, not data classification or persistent protection.
- B. Microsoft Entra Identity Governance manages user identities and access lifecycles, not the protection of data content itself.
- D. Microsoft Defender for Endpoint focuses on endpoint detection and response (EDR) and threat protection for devices, not data classification and persistent protection.
Microsoft Purview Information Protection (MPIP)
MPIP is a solution that helps organizations discover, classify, label, and protect sensitive information across documents and emails, providing persistent protection wherever the data travels.
- Enables automatic and manual data classification.
- Applies encryption and access restrictions to sensitive content.
- Provides persistent protection even when data is shared outside the organization.
Memory trick: Purview 'protects your view' of sensitive data, everywhere.