SC-401 · Question #155
You plan to create a new data loss prevention (DLP) policy named DLP1. DLP1 will be applied to the Exchange email location. You need to exclude two users named User1 and User2 from DLP1. What should…
To exclude specific users from a DLP policy in Microsoft Purview, you must first create a distribution list containing those users so the policy can reference the group as an exclusion.
Question
You plan to create a new data loss prevention (DLP) policy named DLP1. DLP1 will be applied to the Exchange email location. You need to exclude two users named User1 and User2 from DLP1. What should you do first?
Options
- ACreate an organization sharing policy in Microsoft Exchange.
- BCreate an advanced DLP rule.
- CCreate a mail flow rule in Microsoft Exchange.
- DCreate a distribution list that contains User1 and User2.
Why each option
To exclude specific users from a DLP policy in Microsoft Purview, you must first create a distribution list containing those users so the policy can reference the group as an exclusion.
An organization sharing policy in Exchange governs calendar and contact sharing with external organizations and has no effect on DLP policy scope or user exclusions.
An advanced DLP rule defines conditions and actions within a policy, but individual users cannot be excluded without first organizing them into a distribution group that the policy can reference.
A mail flow rule in Exchange processes message routing independently and cannot configure user-level exclusions within a Microsoft Purview DLP policy.
Concept tested: Excluding users from a DLP policy scope
Source: https://learn.microsoft.com/en-us/purview/dlp-policy-design
Topics
Community Discussion
No community discussion yet for this question.