A company is migrating its on-premises file shares to SharePoint Online. They need to ensure that all documents uploaded to a specific SharePoint Online site collection that contain payment card industry (PCI) data are automatically identified and labeled as 'Highly Confidential - PCI'. This label should also prevent sharing with external users. Which Microsoft Purview feature should be configured to achieve this automation?
- AData Loss Prevention (DLP) policy
- BAuto-labeling policy for SharePoint and OneDrive
- CManual sensitivity labeling
- DRetention label policy
Show answer & explanationAnswer & explanation
Correct answer: B. Auto-labeling policy for SharePoint and OneDrive
To automatically apply a sensitivity label based on content (like PCI data) to documents in SharePoint Online and OneDrive, an auto-labeling policy for SharePoint and OneDrive is the correct Microsoft Purview feature. This policy can also enforce protection settings like preventing external sharing associated with the label.
Why the other options are wrong
- A. DLP policies can identify sensitive information and prevent sharing, but they don't apply sensitivity labels for persistent protection and visual indicators.
- C. Manual sensitivity labeling requires users to apply labels, which does not meet the 'automatically identified' requirement.
- D. Retention label policies manage how long content is kept or deleted, not its classification or protection based on content.
Auto-labeling Policy (Microsoft Purview)
An auto-labeling policy in Microsoft Purview automatically applies sensitivity labels to content in SharePoint, OneDrive, and Exchange based on defined conditions, such as the presence of sensitive information types.
- Automates sensitivity label application.
- Works with sensitive information types (SITs).
- Applies to SharePoint, OneDrive, and Exchange.
- Enforces protection settings defined in the label.
Memory trick: The 'auto-labeling policy' is like a smart librarian, automatically stamping books with their correct classification and rules.