What's changed: Created MS-102 Chapter 5 (domain: Manage compliance by using Microsoft Purview). Information protection (sensitive information types keyword/regex, sensitivity labels classify/encrypt/marking and label policies, Content/Activity explorer), data lifecycle management (retention labels item-level, retention label policies publish/auto-apply, retention policies location-level bulk retain/delete), and DLP (Exchange/SharePoint/OneDrive/Teams workload DLP, policy tips, Endpoint DLP device control, DLP alerts/events/reports). This completes the MS-102 textbook: all 5 chapters / 13 sections.
5.3Data loss prevention (DLP)
Understand applying DLP policies to Exchange Online/SharePoint Online/OneDrive/Teams to block sharing/sending of sensitive info, Endpoint DLP for device control, and reviewing/responding to DLP alerts/events/reports.
Data loss prevention (DLP) prevents sensitive information from leaking outside the org. Using classification (sensitivity labels) or detection (SITs) as conditions, it controls sharing/sending actions.
5.3.1Workload DLP
DLP policies apply to workloads such as Exchange Online (mail), SharePoint Online/OneDrive (file sharing), and Teams (chat/channels). On matches (matching a SIT, carrying a sensitive label), they block external sharing/sending, warn users with policy tips, notify managers, or encrypt. You can allow override with justification for false positives.
5.3.2Endpoint DLP and alerts
Endpoint DLP controls actions on Windows/macOS devices with sensitive data—copy (USB/removable media), print, upload to cloud, clipboard—i.e., leakage prevention at the endpoint, not in cloud workloads. Review detections in DLP alerts/events/reports, investigate scope, and respond (tune policy, educate, handle exceptions).
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.