You have a Microsoft 365 E5 subscription that uses Teams. You have a team named Team that contains guest users. You need to ensure that the members of Team1 are prevented from sharing sensitive…

Sensitivity labels allow organizations to classify data and enforce protective policies on content and containers like Teams, private channels, and meetings. By applying a sensitivity label configured to restrict guest access or external sharing to Team1 or to the sensitive information itself, members will be prevented from sharing that content with guests, ensuring sensitive data is protected from unauthorized external parties within Teams communications.

Data loss prevention (DLP) policies primarily focus on identifying and preventing the sharing of specific sensitive data patterns through content inspection, but they do not provide the foundational classification and direct guest access restriction capabilities for entire Teams or files that sensitivity labels offer.

Messaging policies control user features within Teams chats and channels, such as message deletion or GIF usage, but do not provide mechanisms for classifying sensitive information or restricting sharing with guest users.

Information barrier policies prevent specific groups of users from communicating with each other entirely, rather than governing the sharing of sensitive information within existing communication channels or restricting guest access based on content sensitivity.