Using Microsoft Purview Data Loss Prevention to identify sensitive documents

SC-100 By islever Editorial Last updated

Evaluate solutions for securing Microsoft 365

Short answer

B Microsoft Purview DLP identifies, monitors, and protects sensitive information across Teams, SharePoint, and Exchange.

Question

Your company has a Microsoft 365 E5 subscription. The company wants to identify and classify data in Microsoft Teams, SharePoint Online, and Exchange Online. You need to recommend a solution to identify documents that contain sensitive information. What should you include in the recommendation?
  1. content explorer
  2. data loss prevention (DLP) Correct Answer
  3. eDiscovery
  4. data lifecycle management

Key Takeaways

DLP is the capability that identifies sensitive information; Content explorer only views already-classified items, while eDiscovery and data lifecycle management do not perform identification/classification.

To identify and classify sensitive information across Teams, SharePoint, and Exchange in Microsoft 365, use Microsoft Purview Data Loss Prevention (DLP), which detects sensitive content and can apply protection across these workloads.

Common mistake: Choosing content explorer (A) — it lets you view already-classified sensitive items but does not identify/classify them in the first place, which is the requirement.

Expert Analysis

Why the Answer Is Correct

Microsoft Purview Data Loss Prevention (DLP) is designed to identify, monitor, and protect sensitive information across Microsoft 365 workloads including Teams, SharePoint Online, and Exchange Online. The requirement to 'identify documents that contain sensitive information' maps directly to DLP.

Why the Other Options Are Wrong

Content explorer (A) displays items that have already been classified but does not perform identification itself. eDiscovery (C) is for legal discovery, and data lifecycle management (D) governs retention, neither of which identifies/classifies sensitive content.

Community Comment Notes

The community favored B (71 votes). Comments stress that the keyword 'identify' points to DLP, while content explorer only views already-classified data; a minority (A, 29 votes) preferred content explorer.

Official Reference

https://learn.microsoft.com/en-us/purview/dlp-learn-about-dlp

This link opens the official vendor documentation in a new tab.

Community Votes

B
71%
A
29%

71% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

  1. Er_01 👍 4 Answered B
    The key word is identify, which is DLP. Content explorer views already classified items.
  2. Ali96 👍 3 Answered B
    Data Loss Prevention (DLP) is specifically designed to meet these requirements. It enables organizations to identify, monitor, and protect sensitive information across Microsoft 365 services, including Teams, SharePoint, and Exchange
  3. Ali96 👍 3 Answered B
    To identify and classify documents containing sensitive information in Microsoft Teams, SharePoint Online, and Exchange Online, the best solution is Data Loss Prevention (DLP).
  4. 676ae1a 👍 2 Answered A
    Al utilizar el Explorador de contenido, obtienes una visión detallada de cómo se distribuye la información confidencial en los servicios de Microsoft 365. Esto es esencial para proteger los datos sensibles y cumplir con las regulaciones y estándares de privacidad
  5. oscarpopi 👍 2 Answered A
    We should have an option to pick Information Protection, since it's not present, Content explorer would be the closest one. DLP prevents data loss, it doesn't classify or Identify data.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Using Microsoft Entra Permissions Management to find unused RBAC assignments

S-grade

Scenarios supported by compliant network check in Global Secure Access

S-grade

Removing the inbound firewall rule for an Entra application proxy connector

S-grade

Changing DNS MX records to route all inbound mail through Defender for Office 365

S-grade

Practice All SC-100 Questions

Access 110 questions with complete answers and detailed explanations.

View Full SC-100 Practice Test →

← Back to SC-100 Study Guide