DLP Policy Locations in Microsoft Purview
Short answer
ABD Apply DLP policies to Exchange Online email, OneDrive accounts, and Teams chat/channel messages.
Question
NOTE: Each correct answer is worth one point.
Key Takeaways
Tests knowledge of supported DLP policy scopes; the trap is assuming all Microsoft 365 apps (like public folders or Yammer) support granular content scanning.
Identifies the three locations where a data loss prevention policy can be applied within Microsoft Purview. This page explains why Exchange Online email, OneDrive accounts, and Teams messages are correct while public folders and Viva Engage are not supported.
Common mistake: Users often select Exchange Online public folders because they exist within Exchange, but DLP policies do not scan these legacy folders directly.
Expert Analysis
Why the Answer Is Correct
Data Loss Prevention (DLP) policies in Microsoft Purview are designed to protect sensitive information across specific productivity apps and cloud services. The supported locations for applying these policies include Microsoft Exchange Online email (for mail items), Microsoft OneDrive accounts (for files stored in user storage), and Microsoft Teams chat and channel messages (for instant messaging and collaboration). These areas represent the primary vectors for data exfiltration that organizations need to secure.
Why the Other Options Are Wrong
Microsoft Exchange Online public folders are legacy repositories that do not support modern DLP content inspection rules in the same way standard mailboxes do. Similarly, Microsoft Viva Engage (formerly Yammer) posts and comments are currently excluded from direct DLP policy application, meaning you cannot create a rule specifically targeting text within those social feeds.
Community Comment Notes
Community consensus confirms that the valid choices are A, B, and D. As noted by user 'blh_', DLP policies cannot be directly scoped to Exchange Online public folders or Viva Engage messages, reinforcing that only standard emails, OneDrive files, and Teams chats are supported targets.
Official Reference
This link opens the official vendor documentation in a new tab.
Exam Strategy
When studying DLP, focus on the list of supported data locations provided in the official documentation. Memorize which apps support policy enforcement versus those that do not, as this is a common distinction tested in SC-900.
Frequently Asked Questions
Can I apply a DLP policy to Exchange Online public folders?
Is Viva Engage supported for DLP policy enforcement?
Discussion 2 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 2
-
blh_ 👍 1ABD is correct. Data loss prevention (DLP) policies (specifically in Microsoft Purview) can be applied across cloud services, productivity apps, devices, and on-premises environments. Microsoft Purview Data Loss Prevention (DLP) policies cannot be directly scoped or applied to Exchange Online public folders or Viva Engage (formerly Yammer) messages.
-
blh_ 👍 1• Exchange Online email messages and attachments sent or received. • OneDrive for Business files stored in individual user cloud storage accounts. • Microsoft Teams messages in Teams channels and group/private chats.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SC-900 Questions
Access 141 questions with complete answers and detailed explanations.
View Full SC-900 Practice Test →