Information Protection and Governance

Bundled into the existing Microsoft Certified: Security, Compliance, and Identity Fundamentals premium course — no separate purchase.

14-day money-back guarantee — no questions asked.

Included in this chapter:

Capability	Lifecycle stage	Question it answers	Item or location scope
Data classification (SITs, trainable classifiers, EDM)	Know	Where is my sensitive data, by pattern or by example	Scans content across the tenant
Content explorer	Know	Where do labeled and sensitive items live now	Current snapshot, tenant-wide
Activity explorer	Know	What was done to labeled content	History, last 30 days
Sensitivity label	Protect	How sensitive is it and what protection applies	The item, and travels with it
Data loss prevention (DLP)	Protect	Is this a risky share, transfer, or use	Data in motion or in use, across locations
Retention policy and retention label	Govern	How long to keep it, then retain or delete	Location (policy) or item (label)
Records management	Govern	Lock it as an immutable record	The item, via a retention label

Cheat sheet

Sort every Purview data capability into know, protect, or govern
A sensitive information type matches a known pattern
A trainable classifier learns a category from example documents
Exact data match flags only your own real values
Content explorer is a current snapshot of where sensitive content lives
Activity explorer is a history of what was done to labeled content
A sensitivity label attaches protection to the item itself
Sensitivity-label protection persists even outside your organization
Sensitivity label policies publish labels to users and groups
One item can carry a sensitivity label and a retention label at once
Sensitivity label answers how sensitive; retention label answers how long
DLP prevents risky sharing of data in motion or in use
A DLP rule pairs conditions with actions
A retention policy applies by location, not by item
A retention label applies per item and travels within the tenant
A retention label policy publishes or auto-applies labels
Retention settings retain, delete, or retain then delete
Records management marks an item as a record through a retention label
A regulatory record's label cannot be removed by anyone
A sensitivity label's scope sets what it configures, and a container label leaves the files inside unprotected
Preview a DLP policy in simulation mode, then watch matches in the alert dashboard
A disposition review makes a reviewer approve deletion when retention ends
Retention can start on an event and apply itself automatically by scope

Unlock with Premium — includes all practice exams and the complete study guide.

Cheat sheet