📖 What is Microsoft Purview Information Protection?
Microsoft Purview Information Protection is a suite of tools used to discover, classify, and protect sensitive information across an organization. It utilizes sensitivity labels to apply encryption and access restrictions to documents and emails, regardless of where they are stored.
"Understand that sensitivity labels can be applied manually by users or automatically based on predefined sensitive information types."
📚 Certification: Microsoft 365 Administrator (MS-102)
🔑 What are the Key Concepts of Microsoft Purview Information Protection?
- ▸ Sensitivity labels define the level of confidentiality for data and can trigger encryption, watermarking, or header/footer markings on documents and emails.
- ▸ Label policies control the publishing of sensitivity labels, determining which users or groups have the authority to apply specific labels to their content.
- ▸ Sensitive Information Types (SITs) use pattern matching and checksums to automatically identify specific data patterns, such as credit card or passport numbers.
- ▸ Auto-labeling allows the system to detect sensitive content in real-time or at rest, applying the appropriate protection label without requiring manual user action.
- ▸ Integration with Azure Rights Management ensures that encrypted files remain protected and access-restricted even when shared with external collaborators outside the organization.
🎯 How does Microsoft Purview Information Protection appear on the MS-102 Exam?
You may be asked to configure a solution that automatically applies a 'Highly Confidential' label to any document containing Social Security numbers across SharePoint sites.
A scenario might describe a requirement to restrict specific sensitivity labels to only the HR and Legal departments while allowing general labels for all staff.
Expect questions about troubleshooting why a user cannot see a specific sensitivity label, requiring you to verify the label policy assignments in the Purview portal.
❓ Frequently Asked Questions
What is the difference between sensitivity labels and retention labels?
Sensitivity labels focus on data protection and access control (who can see the data), whereas retention labels focus on the data lifecycle (how long data must be kept or when it should be deleted).
Can sensitivity labels be applied to data stored on-premises?
Yes, by deploying the Microsoft Purview Information Protection scanner, organizations can discover, classify, and label sensitive files stored on on-premises file shares and SharePoint Server.
What happens when a user attempts to downgrade a sensitivity label?
Administrators can configure a 'justification' requirement, which forces the user to provide a written reason before they are permitted to lower the sensitivity level of a document.