Information Protection Basics Flashcards
Confidence level link to false positive
The lower, the more false positive
Three ways to create a custom SIT
1) Regex, function, keyword list or dictionary
2) Document fingerprinting
3) Exact data match
Document fingerprinting limitation (5)
Max 50 fingerprints per tenants, password protected files, file that contain only images, files greater than 4MB, dotx files
Number of documents to train a classifier
Between 50 and 500
Number of documents to test a classifier
200
Location where documents for training/testing a trainable classifier need to be
SharePoint Online folder
Permission restriction for trainable classifier
Only the user who created the classifier can train and review predictions made by that classifier
Timeline for trainable classifier
1) Initiate the training classifier that will start by scanning all the content (7-14 days)
2) Train documents (up to 24h)
3) Testing (up to 10 days)
4) Publish
Format limitation of trainable classifier
Encrypted files and name file extensions not supported by SP Online
Downstream inheritance of sensitivity labels
When data is used to generate reports, these reports are also protected by the same sensitivity label
Capabilities of sensitivity labels (2)
1) Encryption
2) Mark documents (header, footer, watermark)
Pre-requisite to start creating sensitivity label policies
Have auditing turned on
Where are sensitivity labels published to?
Users and Groups (incl. distribution and mail-enabled Security Groups)
Where are retention labels published to?
Locations (OneDrive, SharePoint, Exchange,…)
Which portal can you use to enable sensitivity labels for SharePoint and OneDrive?
1) Purview
2) PowerShell
