Memory hook: Classify, protect, retain, investigate and prove.
Must remember
Microsoft Purview brings supported data governance, protection and compliance capabilities together. Classification identifies sensitive information; sensitivity labels mark and apply supported protection; DLP detects/restricts inappropriate data movement. A label policy publishes label availability/default behavior, while an item’s label expresses its classification/handling.
Retention policies and labels manage how long content is retained or deleted. Records management applies stronger lifecycle controls for designated records. Retention and sensitivity labels have different jobs: keeping content is not the same as encrypting or restricting access to it. Legal preservation needs can override ordinary disposal workflows.
Content explorer helps inspect classified content within permissions; Activity explorer shows supported protection-related activity. Insider Risk Management correlates supported indicators under privacy/access controls. eDiscovery supports finding, preserving and reviewing information for investigations/legal processes; audit records supported activity. These functions require appropriate configuration, roles and data scope.
Compliance Manager organizes assessments and improvement actions; compliance score is a progress/risk-management signal, not a legal certification. Service Trust Portal provides Microsoft assurance/compliance resources. Privacy principles and shared responsibility guide evaluation, but an organization must still determine its own obligations and actual control operation.
Choose under exam pressure
| Requirement | Choice and reason |
|---|---|
| Prevent sensitive data leaving through supported channels | DLP. |
| Keep records for a required period | Retention/records controls. |
| Find and preserve relevant investigation content | eDiscovery with authorized scope. |
Traps
- Sensitivity and retention labels are not interchangeable.
- Compliance score is not proof of legal compliance.
Active recall
1. Classification versus DLP?
Identify sensitive information versus detect/control inappropriate movement.
2. What does eDiscovery support?
Finding, preserving and reviewing relevant information under an authorized process.
3. What does audit provide?
Evidence of supported recorded actions.
4. Why use Service Trust Portal?
To review Microsoft assurance and compliance documentation.
5. Does a label replace access control?
No; labels and permissions must work together according to feature behavior.