AZ-900 Practice Question 40: Microsoft Purview
Microsoft Azure Fundamentals (AZ-900) · Test 4 · question 10 of 10
A compliance officer must discover where sensitive customer data sits across the organization's whole data estate, classify it, and then apply retention and data-loss-prevention controls to it. Which Microsoft offering is built for this?
Show answer and explanation
Answer:
Microsoft Purview is a set of solutions that helps an organization govern, protect, and manage data wherever it lives. Its data governance solutions, the Data Map and the Unified Catalog, give visibility into data across the organization; its data security solutions include Information Protection and Data Loss Prevention; and its data compliance solutions include Data Lifecycle Management and Records Management. Discovery, classification, retention, and DLP all sit inside that one product family, which is exactly the officer's list.
Option A, Azure Policy, governs the *configuration of Azure resources* (it can require a storage account to sit in an approved region or carry a tag), but it never looks inside the data to decide whether it is sensitive. Option C, Microsoft Defender for Cloud, strengthens the security posture of workloads and detects threats against them; it reports misconfiguration and attack, not where personal data lives. Option D, Azure Monitor, collects telemetry about how resources behave; logs *about* a database are not a classification of the data *inside* it.
Reference: Learn about Microsoft Purview