Microsoft Cybersecurity Architect (SC-100)Design security for applications and dataMedium

A global enterprise is designing a new data analytics platform on Azure that will consolidate sensitive customer data from various sources, including on-premises databases, Azure SQL Database, and Azure Data Lake Storage Gen2. The company needs a unified data governance solution to discover, classify, map, and manage sensitive data across its entire hybrid data estate. This solution must support automated data classification using sensitivity labels, provide a data catalog for data consumers, and enable data lineage tracking for compliance audits. Which Azure service should the architect recommend for comprehensive data governance?

  1. AAzure Information Protection (AIP)
  2. BAzure Data Factory
  3. CAzure Synapse Analytics
  4. DAzure Purview
Show answer & explanation

Correct answer: D. Azure Purview

Azure Purview (now Microsoft Purview) is a unified data governance service that helps manage and govern on-premises, multicloud, and SaaS data. It provides automated data discovery, classification, sensitivity labeling, data cataloging, and data lineage tracking, directly meeting all the complex requirements for comprehensive data governance.

Why the other options are wrong

  • A. Azure Information Protection (AIP) focuses on classifying, labeling, and protecting documents and emails, but it is not a comprehensive data governance solution for an entire data estate, nor does it provide a data catalog or lineage tracking.
  • B. Azure Data Factory is an ETL (Extract, Transform, Load) service for data integration, primarily focused on moving and transforming data, not on data governance, classification, or cataloging.
  • C. Azure Synapse Analytics is an analytics service that brings together data warehousing, data integration, and big data analytics, but it is not a data governance solution for discovering, classifying, and managing data across a broad data estate.

Microsoft Purview (formerly Azure Purview)

A unified data governance solution that helps organizations manage and govern their on-premises, multi-cloud, and SaaS data, providing data discovery, classification, lineage, and a data catalog.

  • Automated data discovery and classification.
  • Applies sensitivity labels for data protection.
  • Provides a data catalog for business users and data lineage for compliance.

Memory trick: Purview is your data's librarian and detective, finding, classifying, and tracking every book in your digital library.

More Design security for applications and data questions