Exam AB-900 Topic 2 Question 23 Discussion

With a Microsoft 365 E5 subscription, you can use Data Loss Prevention (DLP) policies to identify, monitor, and automatically protect sensitive corporate financial data from being shared with external users.
DLP policies in Microsoft 365 allow you to:
Detect Sensitive Information: Use over 200 built-in sensitive information types (SITs), such as credit card numbers, bank account details, and SWIFT codes.
Apply Specific Rules: Configure policies to trigger only when content is shared with "people outside my organization".
Enforce Actions: Automatically block the sharing of files or sending of emails, or require a business justification for a user override.
Educate Users: Display policy tips in real-time within apps like Outlook or Teams to warn users before they share sensitive data.
Cover Multiple Locations: Extend these protections across Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams.
Incorrect:
[Not C]
While Data Loss Prevention (DLP) is the primary mechanism to block the immediate transfer of data, Insider Risk Management is the tool to monitor, detect, and investigate the behavioral patterns of users who are attempting to leak this data.
Reference:
https://www.clarityitservices.co.uk/blog/microsoft-data-loss-prevention