SC-100 Certification Practice Question #3

Question

Your company is migrating data to Azure. The data contains Personally Identifiable Information (PII).
The company plans to use Microsoft Information Protection for the PII data store in Azure.
You need to recommend a solution to discover PII data at risk in the Azure resources.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

The scenario requires (1) connecting Azure data sources to Microsoft Information Protection and (2) triaging security alerts on Azure resources holding PII. MS Learn's "Leverage Purview Catalog to protect sensitive data" and "Data governance best practices for security" describe exactly this pipeline: Microsoft Purview (registered/scanned as Azure Purview at the time these questions were written) discovers and classifies the sensitive data in Azure sources, and those classifications/labels are "ingested into Microsoft Defender for Cloud," which surfaces them in Alerts, Recommendations, and Inventory to "solve the triage challenge." That makes Row 1 = Azure Purview and Row 2 = Microsoft Defender for Cloud. The Defender for Cloud **Apps** dissent loses because MDCA secures SaaS cloud apps, not the security-alert triage of Azure resources. Confidence 88: a HOTSPOT confidently resolved by the dominant 21-👍 Highly Voted answer plus direct MS Learn integration docs, with the only meaningful split being the Cloud-vs-Cloud Apps confusion in Row 2.

More SC-100 practice questions