Microsoft 365 Mobility and Security (legacy) — Question 72

You have a Microsoft 365 E5 subscription.
You plan to implement Microsoft 365 compliance policies to meet the following requirements:
✑ Identify documents that are stored in Microsoft Teams and SharePoint Online that contain Personally Identifiable Information (PII).
✑ Report on shared documents that contain PII.
What should you create?

Answer options

• A. an alert policy
• B. a data loss prevention (DLP) policy
• C. a retention policy
• D. a Microsoft Defender for Cloud Apps policy

Correct answer: B

Explanation

The correct answer is B, a data loss prevention (DLP) policy, as it is specifically designed to identify and safeguard sensitive information such as PII. The other options do not directly address the need to identify and report on documents containing PII; for instance, an alert policy focuses on notifications rather than content identification.