You need to be alerted when users share sensitive documents from Microsoft OneDrive to any users outside your company. What should you do?

The correct answer is D. From the Microsoft Defender portal, create a file policy. A file policy in Microsoft Defender for Cloud Apps (MDCA), accessed via the Microsoft Defender portal, is designed to monitor cloud-stored files (including OneDrive) and trigger alerts or take automated actions when sharing violations occur-such as sharing files externally…

Implement data loss prevention and retention

Question

Options

AFrom the Microsoft Defender portal create an activity policy.
BFrom the Microsoft Purview portal start an Advanced eDiscovery search.
CFrom the Exchange admin center, create a data loss prevention (DLP) policy.
DFrom the Microsoft Defender portal, create a file policy.

How the community answered

(42 responses)

A
2% (1)
B
5% (2)
C
10% (4)
D
83% (35)

Explanation

A file policy in Microsoft Defender for Cloud Apps (MDCA), accessed via the Microsoft Defender portal, is designed to monitor cloud-stored files (including OneDrive) and trigger alerts or take automated actions when sharing violations occur-such as sharing files externally. Activity policies (A) monitor user behavior events but are not focused on file-sharing content detection. Advanced eDiscovery (B) is a reactive legal investigation tool, not a real-time alert mechanism. DLP policies in the Exchange admin center (C) apply to email and are scoped to Exchange, not OneDrive file sharing.

Topics

#Microsoft Defender for Cloud Apps (MDCA)#File Policies#External Sharing#Data Loss Prevention (DLP)

Community Discussion

No community discussion yet for this question.

Full SC-401 Practice