What must be deployed to Edge and Chrome for insider risk USB copy signals?

SC-401 By islever Editorial Last updated

Implement and manage Microsoft Purview Insider Risk Management

Short answer

Deploy the Microsoft Purview extension (Microsoft Compliance Extension) to both Device1 and Device2; Edge and Chrome both require it for insider risk management browser copy-to-USB signals.

Question

HOTSPOT
You have a Microsoft 365 E5 subscription that contains two Windows devices named Device1 and Device2. Device1 has the default browser set to Microsoft Edge. Device2 has the default browser set to Google Chrome.
You need to ensure that Microsoft Purview insider risk management can collect signals when a user copies files to a USB device by using their default browser.
What should you deploy to each device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit: What must be deployed to Edge and Chrome for insider risk USB copy

Key Takeaways

The item tests the browser-signal prerequisite for insider risk management and traps candidates into giving Edge only built-in capabilities or the Information Protection client instead of the Purview extension.

This SC-401 hotspot asks which component lets Microsoft Purview insider risk management collect browser copy-to-USB signals on Edge and Chrome. It establishes that the Microsoft Purview extension is needed on both Device1 and Device2, not a file-labeling client.

Common mistake: A common error is choosing the Microsoft Purview Information Protection client for Device1 because Edge is Microsoft-native, while assigning the browser extension only to Chrome. That client labels files and does not provide the browser telemetry insider risk management needs for copy-to-USB events.

Expert Analysis

Why the Answer Is Correct

Microsoft Purview insider risk management relies on browser signal collection to see copy-to-USB actions performed in a browser. On Device1, Edge is the default browser, but Edge does not collect the required insider risk browser signals by itself; the Microsoft Purview extension (Microsoft Compliance Extension) must be deployed as an add-on. On Device2, Chrome likewise requires the same Microsoft Purview extension because Chrome has no native Purview signal integration. Therefore the answer area must select the Microsoft Purview extension for both Device1 and Device2, matching the question's requirement to collect signals from the user's default browser.

Why Other Candidate Answers Are Wrong

The Microsoft Purview Information Protection client is a file labeling/classification component, not the browser add-on that captures copy-to-USB telemetry from Edge or Chrome. Selecting it for Device1 or either device would not satisfy the default-browser signal requirement and would leave the Chrome or Edge copy action invisible to insider risk management. Similarly, assuming Edge needs no deployment because of built-in browser capabilities is wrong for this specific insider risk signal scenario; the extension add-on is still part of the supported path. A mixed answer that puts the extension only on Chrome and a different client on Edge misreads the per-device browser requirement.

Community Comment Notes

Ender3 and kanag1 both summarize the practical answer as "MS Purview Extension for both devices", and Caezarlay spells out the same extension for Device1 (Edge) and Device2 (Chrome). kollyp2000 raises the Information Protection client but describes it as something that "labels and classifies files", which actually distinguishes it from the browser extension needed here. JamesM9 points to the insider-risk browser-support documentation and says "The answer to both of these is Purview", while rvln7 adds the Chrome DLP extension article as supporting context. MultiCloudIronMan and Eltooth suggest the Information Protection client for Device1, but that minority view conflicts with the documented browser-extension requirement.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

Treat each device independently and map the default browser to the Purview browser signal source before considering any labeling client. When the scenario asks for insider risk browser copy-to-USB signals, select the Purview/Compliance extension for both Edge and Chrome rows.

Frequently Asked Questions

Does Edge need the Microsoft Purview extension for insider risk USB copy signals, or are built-in capabilities enough?

Edge still needs the Microsoft Purview extension add-on in this scenario; built-in Edge capabilities alone do not satisfy the insider risk management browser signal collection described.

Why is the Microsoft Purview Information Protection client not the right choice for Device1?

The Information Protection client labels and classifies files; it does not provide the browser extension telemetry that insider risk management uses when a user copies files to USB from Edge.

More SC-401 FAQ →

Discussion 9 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 9

  1. Ender3 👍 15
    MS Purview Extension for both devices
  2. Caezarlay 👍 9
    Device1 (Edge): The Microsoft Purview extension Device2 (Chrome): The Microsoft Purview extension
  3. Gtc_ 👍 2
    Agree with answer
  4. kollyp2000 👍 1
    The answer is the Microsoft Purview extension for both Device1 and Device2 Microsoft Purview Information Protection client: it labels and classifies files, mainly through File Explorer, “Microsoft Edge detects signals for these events by using built-in browser capabilities and the Microsoft Compliance Extension add-on. In Google Chrome, customers use the Microsoft Compliance Extension for signal detection.” Source: Learn about and configure Insider Risk Management browser signal detection, https://learn.microsoft.com/purview/insider-risk-management-browser-support#browsers-and-templates
  5. JamesM9 👍 1
    The answer to both of these is Purview, as stated below https://learn.microsoft.com/en-us/purview/insider-risk-management-browser-support
Show 4 more comments
  1. kanag1 👍 1
    Ans: MS Purview Extension for both devices https://learn.microsoft.com/en-us/purview/insider-risk-management-browser-support
  2. MultiCloudIronMan 👍 1
    Device1 → Microsoft Purview Information Protection client Device2 → Microsoft Purview extension
  3. rvln7 👍 1
    correct https://learn.microsoft.com/en-us/purview/dlp-chrome-learn-about
  4. Eltooth 👍 1
    Device 1 - Information Protection client Device 2 - Purview extension

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Using Sensitivity Labels to Restrict Microsoft 365 Copilot Access

S-grade

Microsoft Purview Retention Policy Conflict Resolution

S-grade

Maximum Primary Elements in Microsoft Purview EDM Classifier

S-grade

Encrypting Emails with Azure Storage Keys via DLP

S-grade

← Back to SC-401 Study Guide