Microsoft Purview Features Comparison for MS-102
Microsoft Purview offers a vast array of overlapping tools, such as DLP, Sensitivity Labels, and Retention Policies. Understanding the distinct purpose of each tool—protection, classification, or lifecycle management—is key to deploying the right solution for specific compliance needs.
DLP vs. Sensitivity Labels
While both tools protect data, they serve different primary functions. Sensitivity labels classify and protect data (like applying encryption) and travel with the file. DLP policies monitor data in transit or at rest and enforce actions (like blocking external sharing) based on sensitive information types.
Understanding this distinction is vital for answering scenario-based questions on the MS-102 exam.
Retention Policies vs. eDiscovery Holds
Retention policies proactively manage the lifecycle of data across the organization. In contrast, eDiscovery holds are reactive, used to preserve data for specific users during a legal investigation.
You must know that an eDiscovery hold always takes precedence over a deletion policy.
Insider Risk Management vs. Communication Compliance
Insider Risk Management focuses on detecting broad patterns of risky behavior, such as data theft. Communication Compliance specifically scans emails and Teams chats for inappropriate or regulatory-violating text, such as harassment or sharing financial tips.
Both use machine learning, but their use cases are entirely different.
Final Exam Preparations
The MS-102 exam will present complex scenarios requiring you to choose the exact Purview tool that meets a set of requirements.
Taking advantage of high-quality practice exams like Cert Sensei is the best way to study, as they test your ability to differentiate and apply these compliance features accurately.
❓ Frequently Asked Questions
How do DLP policies differ from Sensitivity Labels?
DLP enforces actions based on sensitive info types during transit/rest, while Sensitivity Labels classify and protect the file itself.
What is the difference between Retention Policies and eDiscovery Holds?
Retention proactively manages data lifecycle, whereas eDiscovery holds reactively preserve data for legal investigations.
How does Insider Risk Management differ from Communication Compliance?
IRM detects patterns of risky behavior like data theft, while Communication Compliance scans messages for inappropriate text.