Which Two Device Types Can Be Managed by Endpoint DLP?
Which two types of devices can be managed by using Endpoint data loss prevention (Endpoint DLP)? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Community Votes
100% of anonymous learners picked answer AD. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests which endpoint platforms the Purview DLP agent actually supports; the trap is assuming Microsoft's cross-platform reach extends to Linux, iOS, or Android, which it does not for Endpoint DLP.
Microsoft Purview Endpoint data loss prevention (Endpoint DLP) monitors sensitive data on onboarded Windows 10/11 and macOS devices only. This page confirms why Windows 11 (A) and macOS (D) are the two correct SC-900 selections.
Many candidates pick Linux or Android because Microsoft Defender for Endpoint and Intune support those platforms, but Endpoint DLP device onboarding is limited to Windows and macOS.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Endpoint DLP in Microsoft Purview is enforced by an agent that is onboarded onto the device itself, and Microsoft documents the supported endpoints as Windows 10, Windows 11, and macOS (the three most recent released versions). Both Windows 11 (A) and macOS (D) therefore represent complete, working solutions, which is exactly what the question asks for. Microsoft's official onboarding documentation devotes separate procedures to Windows onboarding and macOS onboarding, confirming these are the only two device families with an Endpoint DLP client. Because the question states each correct answer is a complete solution, selecting both platforms satisfies it without needing any additional component. The source key (AD) and the unanimous community vote of 100% for AD both align with this documented support matrix.Why the Other Options Are Wrong
Linux (B) runs the Defender for Endpoint agent for other security workloads, but it is not a supported Endpoint DLP onboarding platform, so DLP policies for sensitive data actions cannot be enforced there through this feature. iOS (C) and Android (E) are mobile platforms governed by Microsoft Purview's broader data protection and Intune app protection policies, not by the Endpoint DLP device agent; labeling them as Endpoint DLP-managed devices misstates the feature's scope. Choosing any of B, C, or E alone would fail the "complete solution" requirement, because no Endpoint DLP policy can be applied to those device types. The exam deliberately places adjacent-platform distractors here to separate candidates who understand the specific agent-based architecture from those who generalize Microsoft 365's overall platform support.Community Comment Notes
Community consensus on this item is unusually strong, with every recorded vote selecting AD. KindFlame quoted Microsoft's own wording that Endpoint DLP lets you "monitor onboarded Windows 10, and Windows 11 and onboarded macOS devices," tying the answer directly to the product documentation. Rour reinforced this by linking to the macOS onboarding procedures page, showing the macOS half of the answer is a first-class, documented capability rather than an edge case. Another learner simply confirmed the key as correct, and no commenter argued for Linux, iOS, or Android. The practical takeaway echoed by the thread is to anchor SC-900 Endpoint DLP questions to Microsoft Learn's supported-platform list rather than to assumptions about cross-platform parity.Official Reference
Exam Strategy
Memorize the Endpoint DLP support matrix as a two-item list — Windows and macOS — and treat Linux, iOS, and Android as automatic distractors whenever the question names the Endpoint DLP agent. If the stem says "each correct answer presents a complete solution," expect exactly the number of platforms Microsoft documents, not the number of platforms Intune or Defender can enroll.
Frequently Asked Questions
Why is Linux not a valid Endpoint DLP device even though Defender for Endpoint supports it?
Endpoint DLP enforcement requires the Purview onboarding agent, which Microsoft documents only for Windows 10/11 and macOS, so Linux devices cannot receive Endpoint DLP policies.
Can iOS and Android devices be managed with Endpoint DLP instead?
No. Mobile platforms are handled by Intune app protection and Purview data protection policies, not by the Endpoint DLP device agent used for Windows and macOS.
Related Analysis
Practice All SC-900 Questions
Access 141 questions with complete answers and detailed explanations.
View Full SC-900 Practice Test →