DLP Policy Locations in Microsoft Purview
To which three locations can a data loss prevention (DLP) policy be applied? Each correct answer presents a complete solution. NOTE: Each correct answer is worth one point.
Community Insight
Tests knowledge of supported DLP policy scopes; the trap is assuming all Microsoft 365 apps (like public folders or Yammer) support granular content scanning.
Identifies the three locations where a data loss prevention policy can be applied within Microsoft Purview. This page explains why Exchange Online email, OneDrive accounts, and Teams messages are correct while public folders and Viva Engage are not supported.
Users often select Exchange Online public folders because they exist within Exchange, but DLP policies do not scan these legacy folders directly.
Community Discussion (2 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Data Loss Prevention (DLP) policies in Microsoft Purview are designed to protect sensitive information across specific productivity apps and cloud services. The supported locations for applying these policies include Microsoft Exchange Online email (for mail items), Microsoft OneDrive accounts (for files stored in user storage), and Microsoft Teams chat and channel messages (for instant messaging and collaboration). These areas represent the primary vectors for data exfiltration that organizations need to secure.Why the Other Options Are Wrong
Microsoft Exchange Online public folders are legacy repositories that do not support modern DLP content inspection rules in the same way standard mailboxes do. Similarly, Microsoft Viva Engage (formerly Yammer) posts and comments are currently excluded from direct DLP policy application, meaning you cannot create a rule specifically targeting text within those social feeds.Community Comment Notes
Community consensus confirms that the valid choices are A, B, and D. As noted by user 'blh_', DLP policies cannot be directly scoped to Exchange Online public folders or Viva Engage messages, reinforcing that only standard emails, OneDrive files, and Teams chats are supported targets.Official Reference
Exam Strategy
When studying DLP, focus on the list of supported data locations provided in the official documentation. Memorize which apps support policy enforcement versus those that do not, as this is a common distinction tested in SC-900.
Frequently Asked Questions
Can I apply a DLP policy to Exchange Online public folders?
No, DLP policies cannot be applied directly to Exchange Online public folders.
Is Viva Engage supported for DLP policy enforcement?
No, DLP policies cannot be scoped to Microsoft Viva Engage (Yammer) messages.
Related Analysis
Practice All SC-900 Questions
Access 141 questions with complete answers and detailed explanations.
View Full SC-900 Practice Test →