What Microsoft 365 feature ensures only people in Finance can open a document, even if it's emailed outside the company?

What Microsoft 365 feature ensures only people in Finance can open a document, even if it's emailed outside the company?

• A. Sensitivity labels with encryption
• B. Data Loss Prevention policies
• C. Information Rights Management
• D. Azure Information Protection

Answer: (A)

The correct answer is sensitivity labels with encryption. This feature enables organizations to classify and protect documents and emails based on their sensitivity level. When a document is assigned a sensitivity label that includes encryption, access controls are enforced that specify who can view or edit the document. For instance, if a document is labeled to ensure that only members of the Finance department have access, it can be configured such that even if the document is shared externally via email, only those within the designated group will be able to open it. This ensures that sensitive financial information remains protected from unauthorized access, regardless of where the document is sent. It works seamlessly with the Microsoft 365 ecosystem, providing robust protection and compliance with data handling regulations. Other options, while related to security and information protection, serve different purposes. Data Loss Prevention policies focus on preventing accidental sharing of sensitive information rather than restricting access at the document level. Information Rights Management provides capabilities to manage rights on files but does not inherently include the sensitivity labeling mechanism. Azure Information Protection provides more comprehensive solutions for labeling and protecting data, but the question specifically asks for the mechanism that ensures access control in the way described, which is best encapsulated by sensitivity labels with encryption.

The correct answer is sensitivity labels with encryption. This feature enables organizations to classify and protect documents and emails based on their sensitivity level. When a document is assigned a sensitivity label that includes encryption, access controls are enforced that specify who can view or edit the document. For instance, if a document is labeled to ensure that only members of the Finance department have access, it can be configured such that even if the document is shared externally via email, only those within the designated group will be able to open it.

This ensures that sensitive financial information remains protected from unauthorized access, regardless of where the document is sent. It works seamlessly with the Microsoft 365 ecosystem, providing robust protection and compliance with data handling regulations.

Other options, while related to security and information protection, serve different purposes. Data Loss Prevention policies focus on preventing accidental sharing of sensitive information rather than restricting access at the document level. Information Rights Management provides capabilities to manage rights on files but does not inherently include the sensitivity labeling mechanism. Azure Information Protection provides more comprehensive solutions for labeling and protecting data, but the question specifically asks for the mechanism that ensures access control in the way described, which is best encapsulated by sensitivity labels with encryption.