Describe data loss prevention
As discussed in the previous section, sensitivity labels and sensitivity policies are used to identify sensitive data within files, emails, sites, and collaboration groups. The policies then determine an action that can take place to label or encrypt that data, as identified by an administrator or the user. The activity on this sensitive information is then monitored to identify misuse of this information. A key feature that is missing from sensitivity labels and sensitivity policies is the ability to block this information from being shared. For this, a data loss prevention policy must be in place.
Data loss prevention policies are used to prevent data loss and avoid sensitive data from being leaked to unauthorized users inside or outside of a company. The ability to avoid this data loss relies on a policy to be put in place against the types of sensitive data, using either a sensitivity label that has been created or built-in data types that are...