Microsoft Purview Flashcards
What is Microsoft Purview?
Microsoft Purview is a data governance, compliance, and security platform that helps monitor, protect, and manage data across on-premises and multi-cloud environments.
What are the main areas covered by Purview?
Audit, eDiscovery, Compliance Manager, Communication Compliance, Data Lifecycle Management, and Records Management.
What are the differences between the Standard and Premium Audit Plans?
Standard: Logs user activities and retains them for 180 days. Logs can be exported to CSV.
Premium: Builds on Standard with extended log retention and intelligent insights.
How does Security Co-Pilot enhance the Purview Audit experience?
Co-Pilot uses AI to provide contextual insights and intelligent summaries of audit data, speeding up investigations.
What is the main purpose of eDiscovery in Purview?
To identify, manage, and handle data that may be required in legal cases.
List the five stages of the eDiscovery workflow?
Trigger Event
Create and Manage Case
Search Data
Take Actions (e.g., export, hold)
Review Sets
What role does Co-Pilot play in eDiscovery?
Co-Pilot processes eDiscovery logs, provides contextual summaries, and allows natural language KeyQL queries for faster searches.
What is the role of the Compliance Manager in Purview?
To help organizations manage and track compliance with regulations, using assessments, controls, and compliance scores.
What are the 3 types of controls in Compliance Manager?
Microsoft-Managed Controls, Your Controls, and Shared Controls.
What is an assessment in Compliance Manager?
An assessment is a collection of controls used to evaluate an organization’s alignment with a specific regulation.
What is the main purpose of Communication Compliance in Purview?
To monitor internal and external communications to ensure they comply with organizational policies.
Which platforms can Purview Communication Compliance monitor?
Email, Microsoft Teams, and third-party channels.
How does Co-Pilot improve the Communication Compliance Experience?
Co-Pilot provides contextual summaries of flagged communications, making it easier to review potential policy violations.
What is the difference between a Retention Policy and a Retention Label?
Retention Policy: Applies to all documents in a specific location.
Retention Label: Provides exceptions to the policy and can be applied to specific content.
What are the three possible actions for data under Data Lifecycle Management?
Retain Only
Delete Only
Retain Then Delete
