You need to be alerted when users share sensitive documents from Microsoft OneDrive to any users outside your company.
What should you do?

A. From the Exchange admin center, create a data loss prevention (DLP) policy.

B. From the Azure portal, create an Azure Active Directory (Azure AD) Identity Protection policy.

C. From the Microsoft 365 compliance center, create an insider risk policy.

D. From the Cloud App Security portal, create a file policy.








 

Suggested Answer: D

File Policies allow you to enforce a wide range of automated processes using the cloud provider's APIs. Policies can be set to provide continuous compliance scans, legal eDiscovery tasks, DLP for sensitive content shared publicly, and many more use cases.
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. From the Microsoft 365 compliance center, create a data loss prevention (DLP) policy.
2. From the Cloud App Security portal, create a file policy.
Other incorrect answer options you may see on the exam include the following:
✑ From the Microsoft 365 compliance center, start a data investigation.
✑ From the Azure portal, create an Azure Information Protection policy.
Reference:
https://docs.microsoft.com/en-us/defender-cloud-apps/data-protection-policies

This question is in SC-400 Exam
For getting Microsoft Information Protection and Compliance Administrator Associate Certificate