What's changed: Created MS-700 Chapter 1 (domain: Configure and manage a Teams environment): network planning (bandwidth capacity, Network planner, ports/protocols UDP, Network Assessment Tool, connectivity test tool), governance/lifecycle (update policies, policy packages, policy assignment, M365 group creation/expiration/naming policy, archive/delete/restore, Access reviews, PowerShell/Graph), and security/compliance (Teams admin roles, alert policies, Defender for Office 365 threat policies, retention, sensitivity labels, Purview DLP, Conditional Access, Information Barriers, Communication Compliance, Insider Risk Management).
1.3Security and compliance
Understand choosing Teams administrator roles, alert policies, Defender for Office 365 threat policies, retention, sensitivity labels, Purview DLP, Conditional Access, Information Barriers, Communication Compliance, and Insider Risk Management.
Teams security combines least-privilege roles, data protection (classify/retain/DLP), access control, and communication compliance.
1.3.1Roles and data protection
Assign Teams administrator roles (Teams Administrator, Teams Communications Administrator, Teams Devices Administrator) with least privilege. Protect data with retention policies (retain/delete), sensitivity labels (classify/encrypt teams/meetings, guest control), and Microsoft Purview DLP (block sharing/sending of sensitive info). Address threats with Microsoft Defender for Office 365 threat policies (Safe Attachments/Links) and alert policies (notify on suspicious activity).
1.3.2Access and communication compliance
Control access with Microsoft Entra Conditional Access (require MFA or compliant device by location/device/risk). Choose communication-compliance tools by purpose: Information Barriers proactively block communication between specific groups (e.g., conflicted departments); Communication Compliance monitors/detects inappropriate communication (harassment, leakage signals); Insider Risk Management detects risky insider behavior (mass exfiltration). Distinguish "block communication" = Information Barriers from "monitor communication" = Communication Compliance.
Cues: "block communication between specific groups (proactive)" = Information Barriers. "monitor/detect inappropriate communication (reactive)" = Communication Compliance. "detect risky insider behavior" = Insider Risk Management. "block sensitive sharing/sending" = Purview DLP. "classify/encrypt/guest control" = sensitivity label. "require MFA by location/device" = Conditional Access.
Watch the mix-ups: (1) Information Barriers (block/proactive) vs Communication Compliance (monitor/reactive). (2) DLP (leak prevention) vs sensitivity label (classify) vs retention (preserve) are different layers. (3) Teams threat protection is Defender for Office 365 threat policies. (4) Roles least-privilege (Teams Admin/Comms Admin/Devices Admin by need).
1.3.3Section summary
- Teams admin roles least-privilege; protect data via retention/sensitivity labels/Purview DLP
- Information Barriers = block (proactive); Communication Compliance = monitor (reactive); Insider Risk = insider risk
- Access via Conditional Access; threats via Defender for Office 365 threat policies
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. You want to proactively block two conflicted departments from communicating in Teams. Best?
Q2. You want to monitor/detect inappropriate communication (harassment, leakage) in Teams chats/channels. Best?
Q3. You want to prevent sensitive messages/files from being shared externally in Teams. Best?
Q4. You want to give help desk minimal rights to manage only Teams calling/meeting configuration. Best?
Q5. What correctly distinguishes Information Barriers from Communication Compliance?