Question 1 of 30
A company is implementing Microsoft 365 compliance features to ensure that they adhere to data protection regulations such as GDPR and HIPAA. They want to set up a data loss prevention (DLP) policy that not only identifies sensitive information but also enforces actions based on the type of data being accessed. The compliance officer is considering the best approach to configure the DLP policy to minimize data breaches while ensuring that employees can still perform their duties effectively. Which strategy should the compliance officer prioritize when configuring the DLP policy?
Create a DLP policy that includes specific rules for different types of sensitive information, such as credit card numbers and personal health information, and apply actions like blocking access or notifying users based on the severity of the violation.
Implement a blanket DLP policy that restricts all access to sensitive information without differentiating between types of data, thereby ensuring maximum security.
Focus solely on monitoring data access without enforcing any actions, allowing employees to self-regulate their access to sensitive information.
Set up a DLP policy that only alerts the compliance team when sensitive information is accessed, without any user notifications or restrictions.

Preparing for Microsoft MS-102 Microsoft 365 Administrator? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free