Exam MS-500 topic 4 question 39 discussion

Correct answer is B. a custom sensitive information type

he correct answer is B. a custom sensitive information type. To enable users to manually designate which content will be subject to data loss prevention (DLP) policies, you first need to create a custom sensitive information type. This custom sensitive information type will allow you to define the criteria that trigger a DLP policy and allow users to apply the policy manually to the content they create. Retention labels (option A) are used to classify and apply retention policies to content, but they do not directly relate to DLP policies. A Data Subject Request (DSR) (option C) is a request from an individual to access or control their personal data, which is not directly related to DLP policies. A safe attachments policy (option D) is a policy that helps to protect against malicious attachments by opening them in a virtual environment to check for threats. While this is a security feature, it is not related to DLP policies that protect sensitive information from being shared inappropriately.

A and B might both be correct: DLP policies detect sensitive items by matching them to a sensitive information type (SIT), or to a sensitivity label, or a retention label. Each location supports different methods of defining sensitive content. When you combine locations in a policy, how the content can be defined can change from how it can be defined by a single location. https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-policy-reference?view=o365-worldwide#location-support-for-how-content-can-be-defined

I agree with King2 anwer should be A

Sorry for my previous answer. I read more about Using a retention label as a condition in a DLP policy You can specify a retention label as a condition in a Microsoft Purview Data Loss Prevention (DLP) policy for documents in SharePoint. For example, configure a DLP policy to prevent documents from being shared outside the organization if they have a specified retention label applied to it. When you use a previously created and published retention label as a condition in a DLP policy, there are some things to be aware of: • The retention label must be created and published before you attempt to use it as a condition in a DLP policy.

Correct Answer is B Users can manually designate which content will be subject to data loss prevention (DLP) policies. The admin will add this content to the custom sensitive information type.

Answer is correct We can apply a dlp policy based on the retention label : if item is labled with x retention label do this actions .

In my experience user can use Labels, admins can create sensitive information types, but the last are useless for end-users.

Correct answer is B.