Which types of sensitive data can DLP policies in Microsoft 365 help protect?

• A. Employee evaluations and training records
• B. Web browsing history and cache files
• C. Credit card numbers, social security numbers, and health information
• D. System configuration files

Answer: (C)

DLP (Data Loss Prevention) policies in Microsoft 365 are specifically designed to help organizations protect sensitive information that is critical to privacy and compliance. These policies identify, monitor, and protect sensitive data such as credit card numbers, social security numbers, and health information by applying rules that prevent accidental sharing or unauthorized access to this data.

The focus on protecting sensitive personal information aligns with regulatory requirements such as the GDPR, HIPAA, and others, which aim to safeguard identifiable personal information. By identifying and classifying this type of data, DLP policies can trigger alerts or automatically enforce restrictions, ensuring that organizations maintain compliance and protect sensitive information from leaks or misuse.

Other types of data mentioned, such as employee evaluations, web browsing history, and system configuration files, do not typically fall under the categories monitored by DLP policies. These may be important for organizational processes and security but do not encompass the sensitive personal information that DLP is specifically designed to protect.