You have a Microsoft 365 E5 subscription. You plan to use Microsoft Purview insider risk management. You need to create an insider risk management policy that will detect data theft from Microsoft…

Question

Options

• AConfigure Office indicators.
• BOnboard devices to Microsoft Defender for Endpoint.
• CConfigure a Physical badging connector.
• DConfigure a HR data connector.

• A
  18% (7)
• B
  5% (2)
• C
  8% (3)
• D
  70% (28)

Explanation

To detect data theft from SharePoint Online by departing employees, create an insider risk management policy in Microsoft Purview, select the "Data theft by departing users" template, and add indicators for high-volume downloads or suspicious file activity from SharePoint. Configure the policy to trigger alerts based on these activities and integrate with a HR data connector to identify users near their termination date. To incorporate the HR Connector: 1. Set up the HR Connector: Follow the steps to set up a connector in Purview, which involves creating an app registration in Entra ID, creating an app secret, and using a provided PowerShell script to import HR scenario 2. Import employee data: This script imports data from your HR system into the insider risk management solution, including information about employees who have submitted their resignations or are nearing their termination date. https://learn.microsoft.com/en-us/purview/insider-risk-management-policies

No community discussion yet for this question.