Exam SC-401 topic 1 question 3 discussion

D is correct

For me solution D fits the most. A. data loss prevention is for me to prevent losing the data when they are send via mail, chat etc. It's not granular enough, the question says for unauthorized users. And with DLP you do not have control over the files directly and there permissions. B. Insider Risk Management is a different solutions with a different use case. C. Information Barriers makes it impossible that one department can not write / communicate with another one. D. Sensitivty labels fits the most, because Copilot can work with the labels and if a user is not authorized to a file with a assigned label, then even the user sees the label, copilot can not work with the label, because copilot works in the users context. If he has no access, copilot has no access, and can not give an answer.

This would be a DLP Policy, break down of answer Insider risk is more around individual users Information barriers will restrict communication between groups, not stop leakage of info Sensitivity label is relying on the information being labelled A DLP policy with a sensitive label will meet the requirements

Create label then DLP to take action

Microsoft Purview Information Barriers (IBs) allow organizations to enforce policies that prevent certain groups of users from communicating or sharing information with each other. This is particularly useful in scenarios where sensitive information needs to be protected from unauthorized access, such as in research and development contexts.