SC-200 Certification Practice Question #2

Question

You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.
You have Microsoft SharePoint Online sites that contain sensitive documents. The documents contain customer account numbers that each consists of 32 alphanumeric characters.
You need to create a data loss prevention (DLP) policy to protect the sensitive documents.
What should you use to detect which documents are sensitive?

Accepted Answer

The account number is a custom format (exactly 32 alphanumeric characters) with no matching built-in sensitive information type, so detection requires a custom Sensitive Information Type whose primary element is a regular expression (`^[a-zA-Z0-9]{32}$`). MS Learn states directly that regex is used in Microsoft Purview DLP "to detect patterns in content," and the custom-SIT guidance confirms the regex is the IdMatch element that performs the matching. Both the official Suggested Answer and the community Most Voted are D with 59 votes, and a community member reproduced the working flow (create a regex-based classifier, then attach it to the DLP policy). Confidence is held at 81 because a strongly-upvoted minority (teehex 66 👍, stromnessian 20 👍) reads the question as "what you need" and answers C (Azure Information Protection); however AIP/labels classify and protect but cannot themselves define the 32-character detection pattern, so MS Learn breaks the tie toward D.

More SC-200 practice questions