Your company has a Microsoft 365 E5 subscription. Users use Microsoft Teams, Exchange Online, SharePoint Online, and OneDrive for sharing and collaborating. The company identifies protected health…

The correct answer is B. data loss prevention (DLP) policies. Data Loss Prevention (DLP) policies are the correct solution for preventing protected health information (PHI) from being shared outside the company. DLP policies in Microsoft 365 Purview can detect sensitive information types (including PHI/HIPAA-related data) across Teams…

Design security operations, identity, and compliance capabilities

Question

Your company has a Microsoft 365 E5 subscription. Users use Microsoft Teams, Exchange Online, SharePoint Online, and OneDrive for sharing and collaborating. The company identifies protected health information (PHI) within stored documents and communications. What should you recommend using to prevent the PHI from being shared outside the company?

Options

Ainsider risk management policies
Bdata loss prevention (DLP) policies
Csensitivity label policies
Dretention policies

How the community answered

(30 responses)

A
13% (4)
B
73% (22)
C
3% (1)
D
10% (3)

Explanation

Data Loss Prevention (DLP) policies are the correct solution for preventing protected health information (PHI) from being shared outside the company. DLP policies in Microsoft 365 Purview can detect sensitive information types (including PHI/HIPAA-related data) across Teams, Exchange Online, SharePoint Online, and OneDrive, and enforce actions such as blocking external sharing, requiring justification, or notifying compliance officers. Insider risk management policies (A) detect and alert on risky user behavior but do not actively block sharing. Sensitivity label policies (C) classify and can restrict access but rely on user action to apply labels and are not as effective at automatically preventing external sharing of unclassified PHI. Retention policies (D) manage how long data is kept, not whether it can be shared externally.

Topics

#Data Loss Prevention (DLP)#PHI#Microsoft 365 Compliance#Information Protection

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice