SC-100 Certification Practice Question #204

Question

Your company has a Microsoft 365 E5 subscription.
Users use Microsoft Teams, Exchange Online, SharePoint Online, and OneDrive for sharing and collaborating.
The company identifies protected health information (PHI) within stored documents and communications.
What should you recommend using to prevent the PHI from being shared outside the company?

Accepted Answer

The goal is to *prevent* PHI from being *shared outside the company* across Teams, Exchange Online, SharePoint Online, and OneDrive — which is precisely the function of Microsoft Purview DLP. DLP policies span all four named workloads and can block content shared with people outside the organization based on sensitive information types (PHI). Sensitivity labels classify and can encrypt content but do not themselves enforce a "block external sharing" action; insider risk management and retention policies address different objectives entirely. Suggested Answer, an overwhelming 62-vote Most Voted, the 41-👍 top comment, and MS Learn all agree on B.

More SC-100 practice questions