Information Protection & Governance Flashcards

What is required before sensitivity labels can be applied by end users in Microsoft 365 Apps?

Answer: Publishing the labels via a label policy to users or groups

Sensitivity labels must be published through a label policy that targets specific users or groups before users can see and apply them in Microsoft 365 Apps.

Which Microsoft Purview feature monitors employee communications for policy violations such as harassment or insider threats?

Answer: Communication Compliance

Communication Compliance analyzes emails, Teams messages, and other communications to detect policy violations including harassment, sensitive data leaks, and regulatory violations.

An organization needs to identify all documents containing credit card numbers stored across Microsoft 365. Which capability should be used?

Answer: Microsoft Purview Content Explorer

Content Explorer in Microsoft Purview shows all items across Microsoft 365 that contain sensitive information types such as credit card numbers.

Which type of sensitive information type uses trainable classifiers rather than regex patterns to detect content?

Answer: Trainable classifiers

Trainable classifiers use machine learning models trained on sample content to identify categories of sensitive content that are difficult to define with regex patterns.

What is the function of Exact Data Match (EDM) in Microsoft Purview DLP?

Answer: Detect sensitive data that exactly matches records in a custom database

EDM allows organizations to create custom sensitive information types that match exact data values from an organization's database, such as employee IDs or patient records.

A label policy is configured to require users to justify downgrading a sensitivity label. What type of control is this?

Answer: Label justification for downgrade

Label justification for downgrade requires users to provide a reason when removing or lowering a sensitivity label, creating an audit trail for label changes.