M365 Compliance Center Flashcards

Question

What is the difference between Retention Policies and RM?

Answer 1

While RM leverages Rentention Policies, they perform differently. Retention labels keep a copy of the content hidden from the user (but they can still delete/modify content from the UI), but RM blocks actions in the UI.

Answer 2

Is a feature in M365 that lets you monitor and configure tools for data classification.

Answer 3

- Trainable classifiers - Sensitive Information Types - Exact Data Matches

Answer 4

A tool you train to recognize various types of content. Microsoft provides 5 pre-built classifiers out of the box, but you can make your own.

Answer 5

Pattern-based classifiers to detect sensitive information (credit card, etc.) Microsoft offers 200+ built in from around the world and you can also create your own.

Answer 6

In Retention policies, Sensitivity labels and/or Communication compliance.

Answer 7

``` Data Loss Prevention policies Sensitivity labels Retention labels Insider risk management Communication compliance ```

Answer 8

Exact Data Match (EDM)-based classification allows you to create custom sensitive information types based on exact data values rather than a pattern.

Answer 9

Data Loss Policies

Answer 10

The content explorer is a tool that provides a snapshot of items that have a - Sensitivity Label Retention Label Classified as sensitive information It also allows you to natively view items so you can their content and why they were classified in a certain way.

Answer 11

A tool that lets you monitor what's being done with your labelled content.

Answer 12

Read Deletion Printed Copied to network share/USB

Answer 13

The Service Trust Portal provides information, tools, and other resources about Microsoft security, privacy, and compliance practices. Sign in with your Microsoft cloud services account to access all the available documentation. More information: https://docs.microsoft.com/en-gb/learn/modules/describe-compliance-management-capabilities-microsoft/2-describe-service-trust-portal

Answer 14

The Microsoft Purview compliance portal brings together all of the tools and data that are needed to help understand and manage an organization’s compliance needs. The compliance portal is available to customers with a Microsoft 365 SKU with one of the following roles: - Global administrator - Compliance administrator - Compliance data administrator

Answer 15

Sensitivity labels, available as part of information protection in the Microsoft Purview compliance portal, enable the labeling and protection of content, without affecting productivity and collaboration. With sensitivity labels, organizations can decide on labels to apply to content such as emails and documents, much like different stamps are applied to physical documents: Labels are: Customizable: Admins can create different categories specific to the organization, such as Personal, Public, Confidential, and Highly Confidential. Clear text: Because each label is stored in clear text in the content's metadata, third-party apps and services can read it and then apply their own protective actions, if necessary. Persistent. After you apply a sensitivity label to content, the label is stored in the metadata of that email or document. The label then moves with the content, including the protection settings, and this data becomes the basis for applying and enforcing policies.

Answer 16

After sensitivity labels are created, they need to be published to make them available to people and services in the organization. Sensitivity labels are published to users or groups through label policies. Sensitivity labels will then appear in Office apps for those users and groups. The sensitivity labels can be applied to documents and emails. Label policies enable admins to: 1) Choose the users and groups that can see labels. Labels can be published to specific users, distribution groups, Microsoft 365 groups in Azure Active Directory, and more. 2) Apply a default label to all new emails and documents that the specified users and groups create. Users can always change the default label if they believe the document or email has been mislabeled. 3) Require justifications for label changes. If a user wants to remove a label or replace it, admins can require the user to provide a valid justification to complete the action. The user will be prompted to provide an explanation for why the label should be changed. 4) Require users to apply a label (mandatory labeling). It ensures a label is applied before users can save their documents, send emails, or create new sites or groups. 5) Link users to custom help pages. It helps users to understand what the different labels mean and how they should be used.

Answer 17

Retention labels and policies help organizations to manage and govern information by ensuring content is kept only for a required time, and then permanently deleted. A retention label is applied to an item, only one label can be applied and travels with the item. Retention policies are used to assign the same retention settings to content at a site level or mailbox level. A single policy can be applied to multiple locations, or to specific locations or users. Items inherit the retention settings from their container specified in the retention policy. If a policy is configured to keep content, and an item is then moved outside that container, a copy of the item is kept in the workload's secured location. However, the retention settings don't travel with the content in its new location.

M365 Compliance Center Flashcards

(42 cards)