Question
Your company is migrating data to Azure. The data contains Personally Identifiable Information (PII).
The company plans to use Microsoft Information Protection for the PII data store in Azure.
You need to recommend a solution to discover PII data at risk in the Azure resources.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation
To connect the Azure data sources to Microsoft Information Protection: Azure Purview (now Microsoft Purview). The Microsoft Purview Data Map scans Azure data sources such as Azure Storage and Azure SQL Database, classifies the data it finds, and applies the Microsoft Information Protection sensitivity labels and sensitive information types, so PII stored in Azure is discovered and labeled. Endpoint data loss prevention covers devices, not Azure data stores, and Defender for Cloud Apps governs SaaS apps.
To triage security alerts related to resources that contain PII data: Microsoft Defender for Cloud. Its data-aware security posture uses the sensitivity information discovered in your Azure resources, so alerts on storage and databases show whether the resource holds sensitive data and can be prioritized accordingly. Azure Monitor collects telemetry but does not provide security alert triage, and Defender for Cloud Apps focuses on cloud app usage rather than Azure resources.
