Which Devices Can Endpoint DLP Policies Be Applied To?

MS-102 By islever Editorial Last updated Sep 28, 2026

Implement Microsoft Purview data loss prevention (DLP)

Short answer

A Endpoint DLP policies can be applied only to onboarded Windows 11 devices here; Android and iOS are not supported Endpoint DLP platforms.

Question

You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices: • Windows 11 • Android • iOS To which devices can you apply Endpoint DLP policies?

Windows 11 only Correct Answer
Windows 11 and Android only
Windows 11 and iOS only
Windows 11, Android, and iOS

Key Takeaways

Tests the supported platform list for Endpoint DLP (onboarded Windows 10 1809+/Windows 11 and macOS) versus the separate mobile DLP capability built on Defender for Endpoint for Android and iOS.

Endpoint DLP policies in Microsoft Purview can only be applied to devices that support Endpoint DLP onboarding, so knowing the supported platforms decides where a policy can actually land. This page establishes that among Windows 11, Android, and iOS, only Windows 11 qualifies, making A the correct answer.

Common mistake: Picking D and assuming a Microsoft 365 E5 subscription automatically extends Endpoint DLP policies to Android and iOS. Those mobile operating systems are handled by a different DLP capability, and macOS — the other real Endpoint DLP platform — is not among the options.

Expert Analysis

Why the Answer Is Correct

Endpoint DLP is a device-level control: the device must be onboarded (through Microsoft Defender for Endpoint / Purview device onboarding) before a DLP policy can inspect file, copy, print, USB and network-share activity. Microsoft documents that capability for Windows 10 1809 and later, Windows 11, Windows Server 2019/2022 (x64) and the three latest macOS releases. Of the device types in this question — Windows 11, Android and iOS — only Windows 11 is an Endpoint DLP platform, so A is the only defensible choice. The macOS support that commenters correctly cite does not change the outcome because macOS is not one of the options offered. Android and iOS protection is delivered through the mobile DLP capability surfaced via the Microsoft Defender for Endpoint app, which is configured and licensed differently from Endpoint DLP device onboarding.

Why the Other Options Are Wrong

Option B and option C both grant Windows 11 plus one mobile OS, which creates the same error as option D in smaller doses: neither Android nor iOS is an Endpoint DLP platform, so there is no basis for including either. Option D is the tempting "E5 gives me everything" answer, but licensing tier does not override the platform support matrix — an E5 tenant still cannot push an Endpoint DLP policy to an Android or iOS device. Note also that macOS, which genuinely is supported, was deliberately left out of the option list, which is a hint that the question is testing the mobile OS exclusion rather than the full matrix.

Community Comment Notes

The strongest comment, from user 471e282, states plainly that "A is correct - Microsoft Endpoint DLP allows you to monitor onboarded Windows 10, and Windows 11" and adds onboarded macOS devices, matching the official support list. user 004b54c reinforces this by pasting the Microsoft Learn URL endpoint-dlp-learn-about and its device list (Windows 10 1809+, Windows 11, Windows Server 2019/2022, macOS three latest versions). Only daleritf voted D with the bare assertion "Win11, Android and ioS", offering no documentation, and that lone dissent against 75 A-votes should be treated as an assumption about E5 breadth rather than evidence.

Official Reference

https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about

This link opens the official vendor documentation in a new tab.

Exam Strategy

Memorize the Endpoint DLP platform list as "Windows 10 1809+, Windows 11, Windows Server 2019/2022, and the three latest macOS versions" — nothing mobile. When an MS-102 option set mixes Windows 11 with Android or iOS, the mobile OSes are the distractor and the Windows-only answer is usually the intended one.

Frequently Asked Questions

Do Endpoint DLP policies support Android and iOS devices?

No. Endpoint DLP applies to onboarded Windows 10 1809+, Windows 11, Windows Server 2019/2022 and macOS only; Android and iOS protection comes from the separate mobile DLP capability using the Defender for Endpoint app.

Is macOS supported by Endpoint DLP even though it is not in the options?

Yes, macOS is a supported Endpoint DLP platform, but since the question lists only Windows 11, Android and iOS, Windows 11 remains the single correct choice.

More MS-102 FAQ →

Community Votes

75%

25%

75% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

471e282 👍 2 Answered A

A is correct - Microsoft Endpoint DLP allows you to monitor onboarded Windows 10, and Windows 11 and onboarded macOS devices
004b54b 👍 1 Answered A

https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about#endpoint-dlp-windows-1011-and-macos-support: Devices for which Endpoint DLP is available are: Windows 10, 1809 and later, Windows 11, Windows Server 2019, Windows Server 2022 (21H2 onwards) for Endpoints (X64) macOS (three latest released versions)
daleritf 👍 1 Answered D

Win11 , Android and ioS

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All MS-102 Questions

Access 111 questions with complete answers and detailed explanations.

View Full MS-102 Practice Test →

← Back to MS-102 Study Guide