MS-102 · Question #122
You have a Microsoft 365 E5 subscription. From the Microsoft Purview compliance portal, you create a new data loss prevention (DLP) policy named DLP1 that protects financial data from being shared…
The correct answer is D. Edit the policy rules of DLP1. The symptom reveals that DLP1 is correctly scoped to Teams (it is triggering for channels) but the policy rule's action for Teams channel messages with external members is set to 'generate an incident report' rather than 'block the message.' Because 1:1 chats and private…
Question
You have a Microsoft 365 E5 subscription. From the Microsoft Purview compliance portal, you create a new data loss prevention (DLP) policy named DLP1 that protects financial data from being shared by using Microsoft Teams messages. You apply DLP1 to the users in the finance department. An incident is raised when a finance department user named User1 shares financial data in a Teams channel that includes external members. When User1 uses Teams to send the same message in a 1:1 chat or a private channel, the message is blocked as expected. You need to ensure that User1 is prevented from sharing financial data in Teams channels that include external members. What should you do?
Options
- AEdit the settings of the team that contains the channel.
- BEdit the Locations settings of DLP1.
- CModify the licenses assigned to User1.
- DEdit the policy rules of DLP1.
How the community answered
(26 responses)- A8% (2)
- B8% (2)
- C4% (1)
- D81% (21)
Explanation
The symptom reveals that DLP1 is correctly scoped to Teams (it is triggering for channels) but the policy rule's action for Teams channel messages with external members is set to 'generate an incident report' rather than 'block the message.' Because 1:1 chats and private channels are being blocked as expected, the Locations setting is not the issue. To block content in channels containing external members, the policy rule conditions must be updated - specifically by adding a condition that detects the presence of external participants and setting the corresponding action to block the message. This requires editing the policy rules of DLP1, not its location scope or User1's license.
Topics
Community Discussion
No community discussion yet for this question.