SC-100 Certification Practice Question #107

Question

You have a Microsoft 365 subscription that contains 1,000 users. Each user is assigned a Microsoft 365 E5 license.

The subscription uses sensitivity labels to classify corporate documents. All the users have Windows 11 devices that are onboarded to Microsoft Defender for Endpoint and are configured to sync files to Microsoft OneDrive.

You need to prevent the users from uploading the documents from OneDrive to external websites.

What should you include in the solution?

Accepted Answer

Devices are onboarded to Defender for Endpoint, and the goal is to stop users uploading OneDrive-synced documents to external websites. Microsoft Purview Endpoint DLP provides exactly this control through "Browser and domain restrictions to sensitive data" / "Upload to a restricted cloud service domain," enforced on the Devices location and able to act on sensitivity-labeled content (the docs are already classified by sensitivity labels). Information Protection (A) only classifies/labels and cannot block uploads; web content filtering (C) blocks site categories, not file uploads; an endpoint security policy (D) covers antivirus/ASR/firewall, not data exfiltration. The Suggested Answer, the in-choices Most Voted ✓ marker, two 2-👍 community comments, and MS Learn all agree on B.

More SC-100 practice questions