MS-102 · Question #299
You have a Microsoft 365 E5 subscription. You create a data loss prevention (DLP) policy named DLP1. You need to ensure that endpoint rule actions are available in the advanced DLP rules for DLP1…
The correct answer is D. Devices. To enable endpoint rule actions in a Data Loss Prevention (DLP) policy, the policy must be applied to 'Devices'.
Question
You have a Microsoft 365 E5 subscription. You create a data loss prevention (DLP) policy named DLP1. You need to ensure that endpoint rule actions are available in the advanced DLP rules for DLP1. To which location should you apply DLP1?
Options
- AInstances
- BOneDrive accounts
- COn-premises repositories
- DDevices
How the community answered
(27 responses)- A4% (1)
- B4% (1)
- D93% (25)
Why each option
To enable endpoint rule actions in a Data Loss Prevention (DLP) policy, the policy must be applied to 'Devices'.
'Instances' is not a standard DLP location where policies are applied; policies are applied to specific workloads or data stores.
Applying a DLP policy to 'OneDrive accounts' enables DLP for cloud data in OneDrive but does not enable endpoint-specific actions for devices themselves.
Applying a DLP policy to 'On-premises repositories' enables DLP for file shares and SharePoint on-premises, but it does not enable endpoint-specific actions for user devices.
To use endpoint rule actions in advanced DLP rules, the data loss prevention (DLP) policy must be applied to 'Devices'. Endpoint DLP specifically monitors and controls activities on Windows and macOS devices.
Concept tested: Endpoint DLP policy location requirements
Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-get-started?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.