Microsoft SC-100 Exam - Topic 2 Question 66 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 66
Topic #: 2

You have a Microsoft 365 subscription that contains 1,000 users. Each user is assigned a Microsoft 365 E5 license.

The subscription uses sensitivity labels to classify corporate documents. All the users have Windows 11 devices that are onboarded to Microsoft Defender for Endpoint and are configured to sync files to Microsoft OneDrive.

You need to prevent the users from uploading the documents from OneDrive to external websites.

What should you include in the solution?

AMicrosoft Purview Information Protection

BMicrosoft Purview data loss prevention (DLP)

Cweb content filtering in Defender for Endpoint

Dan endpoint security policy

Show Suggested Answer

Suggested Answer: B

by Joesph at Jun 15, 2025, 07:15 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Steffanie

3 months ago

Isn't DLP just for data at rest? Not sure it covers uploads.

upvoted 0 times

...

Tegan

3 months ago

Surprised this is even a question, DLP is the way to go!

upvoted 0 times

...

Devon

4 months ago

I think web content filtering could help too, but not the best option.

upvoted 0 times

...

Raul

4 months ago

I disagree, endpoint security policy should be enough.

upvoted 0 times

...

Cheryl

4 months ago

Definitely need Microsoft Purview DLP for this!

upvoted 0 times

...

Vincent

4 months ago

I wonder if using an endpoint security policy would actually address the issue of uploading documents to external sites.

upvoted 0 times

...

Hector

4 months ago

I practiced a similar question where we had to restrict data sharing, and I think Microsoft Purview DLP is the best option here.

upvoted 0 times

...

Evelynn

5 months ago

I'm not entirely sure, but I feel like web content filtering might not be the right approach for this scenario.

upvoted 0 times

...

Francesco

5 months ago

I remember studying about DLP policies in Microsoft 365, and I think they can help prevent data from being shared externally.

upvoted 0 times

...

Tamar

5 months ago

Okay, I think I've got it. The answer is B - Microsoft Purview data loss prevention (DLP). This will allow me to create policies to monitor and control the sharing of sensitive documents, which is exactly what the question is asking for. I feel confident in this choice.

upvoted 0 times

...

Denae

5 months ago

Ah, this is a tricky one. I'm torn between A and B. Information protection and data loss prevention both sound relevant, but I'm not sure which one is the better fit for this specific scenario. I'll need to think it through carefully.

upvoted 0 times

...

Shaunna

5 months ago

Hmm, I'm a bit unsure about this one. I'm trying to decide between B and C. I know DLP can help control data leakage, but web content filtering in Defender for Endpoint might also be a good option. I'll need to review the details of each approach.

upvoted 0 times

...

Bobbie

5 months ago

This seems like a straightforward question. I think the answer is B - Microsoft Purview data loss prevention (DLP) would be the best solution to prevent users from uploading sensitive documents to external websites.

upvoted 0 times

...

Billye

8 months ago

Option B is the obvious choice here. Unless you want your sensitive documents to end up on the dark web, you better lock that OneDrive down tight with DLP.

upvoted 0 times

...

Lonna

8 months ago

DLP all the way! I can't believe there's even a debate about this. It's like trying to use a hammer to fix a broken computer. Just use the right tool for the job, people!

upvoted 0 times

Pa

6 months ago

A) Microsoft Purview Information Protection

upvoted 0 times

...

Shonda

6 months ago

B) Microsoft Purview data loss prevention (DLP)

upvoted 0 times

...

Moira

8 months ago

Hmm, I'm not sure if web content filtering in Defender for Endpoint would be enough. Better to use the more robust DLP solution from Purview.

upvoted 0 times

...

Rickie

8 months ago

I'd go with option B. DLP is the perfect solution to prevent users from uploading sensitive documents to external websites.

upvoted 0 times

Teri

7 months ago

I think an endpoint security policy could also be useful in this situation.

upvoted 0 times

...

Shawnna

7 months ago

D) an endpoint security policy

upvoted 0 times

...

Rachael

7 months ago

That's a good choice. DLP can definitely help prevent unauthorized uploads.

upvoted 0 times

...

Delila

7 months ago

B) Microsoft Purview data loss prevention (DLP)

upvoted 0 times

...

Jaime

8 months ago

Agreed, DLP is a crucial tool for protecting sensitive information.

upvoted 0 times

...

Stefanie

8 months ago

That sounds like the best option to prevent data leakage.

upvoted 0 times

...

Rasheeda

8 months ago

B) Microsoft Purview data loss prevention (DLP)

upvoted 0 times

...

Heidy

9 months ago

I think we should also consider web content filtering in Defender for Endpoint to enhance security.

upvoted 0 times

...

Billye

9 months ago

I agree with Denise, Microsoft Purview Information Protection can help prevent users from uploading documents to external websites.

upvoted 0 times

...

Denise

9 months ago

I think we should include Microsoft Purview Information Protection in the solution.

upvoted 0 times

...

Filiberto

9 months ago

Microsoft Purview Data Loss Prevention (DLP) is the way to go here. It allows you to monitor and control the sharing of sensitive documents, even from OneDrive.

upvoted 0 times

Val

8 months ago

C) web content filtering in Defender for Endpoint

upvoted 0 times

...

Han

8 months ago

B) Microsoft Purview data loss prevention (DLP)

upvoted 0 times

...