Which Devices Support Endpoint DLP Policies in Microsoft 365 E5?

Implement Microsoft Purview data loss prevention (DLP) Implement Microsoft Purview information protection and data lifecycle management

Answer Correct answer: A — Endpoint DLP policies apply only to Windows 10 devices; Android and iOS are protected by Intune app protection policies, not Endpoint DLP.

You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices: • Windows 10 • Android • iOS To which devices can you apply Endpoint DLP policies?

Windows 10 only Correct Answer
Windows 10 and Android only
Windows 10 and iOS only
Windows 10, Android, and iOS

endpoint dlp device support purview endpoint dlp windows 10 microsoft 365 e5 dlp intune app protection policies

Community Votes

100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The question tests the boundary of Endpoint DLP device support: it is an endpoint (device) DLP workload for desktop operating systems, and the classic trap is assuming that because E5 licenses cover mobile DLP, Endpoint DLP itself also covers Android and iOS.

Endpoint DLP in Microsoft Purview extends DLP activity monitoring and protection to sensitive content physically stored on managed Windows 10/11 (and macOS) devices. In a Microsoft 365 E5 subscription this question tests whether Android and iOS endpoints also qualify — they do not, so the answer is Windows 10 only.

Choosing 'Windows 10, Android, and iOS' because E5 includes mobile DLP capability — but mobile protection on Android/iOS comes from Intune app protection policies and Defender for Cloud Apps / Purview DLP for cloud apps, not from Endpoint DLP policies.

Community Discussion (3 comments)

justITtopics 👍 3 Selected: A

https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about Endpoint data loss prevention (Endpoint DLP) extends the activity monitoring and protection capabilities of DLP to sensitive items that are physically stored on Windows 10/11 and macOS (the three latest released major versions) devices. macOS not iOS

atre_01 👍 1 Selected: A

In a Microsoft 365 E5 subscription, Endpoint Data Loss Prevention (DLP) policies can be applied to Windows 10/11 devices. Currently, Endpoint DLP policies do not extend to Android or iOS devices. However, you can still implement DLP controls for Android and iOS through Microsoft Purview DLP for cloud apps (such as Exchange Online, SharePoint, and OneDrive) or via Intune app protection policies (APP), which help protect sensitive data within mobile apps rather than on the device level itself.

Preeb 👍 2

With a Microsoft 365 E5 subscription, you can apply Endpoint DLP (Data Loss Prevention) policies to: D. Windows 10, Android, and iOS Endpoint DLP supports Windows 10 devices, as well as mobile devices running Android and iOS.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Expert Analysis

Why the Answer Is Correct

Endpoint DLP is the Purview workload that brings DLP activity monitoring and enforcement onto the device itself, protecting sensitive items stored locally and acted on by apps on that device. Microsoft's documentation scopes Endpoint DLP to Windows 10/11 and macOS devices; Android and iOS are not onboarded as Endpoint DLP devices in the Microsoft 365 E5 scenario described. Because the question asks "To which devices can you apply Endpoint DLP policies?" and only Windows 10 is listed among the supported set, option A is the only option that matches the platform scope. The E5 license alone does not extend Endpoint DLP to mobile operating systems, and nothing in the scenario mentions Intune app protection or Defender for Cloud Apps, which are the mechanisms used for Android and iOS instead.

Why the Other Options Are Wrong

Option B (Windows 10 and Android only) and option C (Windows 10 and iOS only) both invent a mobile platform that Endpoint DLP does not onboard, and they split the mobile pair arbitrarily — there is no Microsoft rule that treats one mobile OS as supported and the other not. Option D (Windows 10, Android, and iOS) is the most tempting distractor because Microsoft 365 E5 does enable DLP scenarios on mobile devices, but those scenarios run through Intune app protection policies and cloud-app DLP against Exchange Online, SharePoint and OneDrive, not through Endpoint DLP policies applied to the device. Only option A lists a device family that Endpoint DLP actually supports, so B, C and D all fail on the same platform-support boundary.

Community Comment Notes

justITtopics answered A and cited the Microsoft Learn page, quoting that Endpoint DLP "extends the activity monitoring and protection capabilities of DLP" to sensitive items stored locally on Windows and macOS devices, pointedly noting macOS rather than iOS. atre_01 also chose A, explaining that Endpoint DLP policies simply do not reach Android or iOS endpoints and that mobile control is instead achieved via Purview DLP for cloud apps or Intune app protection policies. Preeb dissented with option D, reasoning that an E5 subscription means Android and iOS must be covered, but the comment does not identify any Endpoint DLP onboarding mechanism for those platforms. The weight of the documented platform list, plus the two explanations that name the actual mobile alternatives, supports A over the lone D vote.

Official Reference

https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about

Exam Strategy

For MS-102 device-scope questions, separate the device workload (Endpoint DLP on Windows/macOS) from the mobile workload (Intune app protection policies and Purview DLP for cloud apps on Android/iOS). When an option set mixes Windows with mobile OSes, ask whether an E5 license or an actual Endpoint DLP onboarding path is being described.

Frequently Asked Questions

Why aren't Android and iOS devices covered by Endpoint DLP in an E5 subscription?

Endpoint DLP only onboards Windows 10/11 and macOS devices. Android and iOS protection uses Intune app protection policies and Purview DLP for cloud apps such as Exchange Online, SharePoint and OneDrive.

Does an E5 license alone make Android and iOS Endpoint DLP devices?

No. Licensing enables the DLP service, but device support is defined by the platform list Microsoft publishes for Endpoint DLP, which does not include Android or iOS.

Related Analysis

Practice All MS-102 Questions

Access 111 questions with complete answers and detailed explanations.

View Full MS-102 Practice Test →

← Back to MS-102 Study Guide