📖 What is Microsoft Purview Sensitivity Labels?
Microsoft Purview Sensitivity Labels are tags applied to documents, emails, and files to classify and protect data based on its level of sensitivity. These labels can trigger encryption, watermarking, and access restrictions to ensure only authorized users can view the content.
"Labels are the foundation of Information Protection; remember that they can be applied manually by users or automatically by the system."
📚 Certification: Microsoft 365 Administrator (MS-102)
🔑 What are the Key Concepts of Microsoft Purview Sensitivity Labels?
- ▸ Label Policies define which users or groups have access to specific labels, allowing administrators to target different classification schemes to different departments.
- ▸ Encryption and access controls within labels use Azure Rights Management to restrict who can view, edit, or print sensitive documents and emails.
- ▸ Auto-labeling leverages Sensitive Information Types (SITs) to automatically apply labels based on content, reducing reliance on manual user classification and improving compliance.
- ▸ Visual markings, such as headers, footers, and watermarks, provide immediate visual cues to users regarding the sensitivity level of the content they are viewing.
- ▸ Label hierarchies allow for a parent-child structure, enabling organizations to create broad categories like 'Confidential' with specific sub-labels like 'Finance' or 'Legal'.
🎯 How does Microsoft Purview Sensitivity Labels appear on the MS-102 Exam?
You may be asked to design a solution where documents containing PII are automatically encrypted. You must identify the combination of a sensitivity label and an auto-labeling policy using SITs.
A scenario might describe a requirement to prevent users from downgrading a label from 'Secret' to 'Public' without providing a reason. You will need to configure the 'Justification' setting.
Expect questions about deploying labels to a specific subset of users. You must explain how to create a label policy and assign it to a specific security group to ensure only authorized personnel see specific labels.
❓ Frequently Asked Questions
What is the difference between sensitivity labels and retention labels?
Sensitivity labels are used for classification and protection (encryption, access control), whereas retention labels manage the data lifecycle, determining how long content is kept or when it must be deleted.
Can sensitivity labels be applied to entire SharePoint sites or Teams?
Yes, labels can be applied at the container level. This allows administrators to enforce settings like blocking guest access or preventing unmanaged device access for the entire site.