Question

A compliance officer at a pharmaceutical company needs to detect when employees leaving the organization download unusually large volumes of research documents from SharePoint and OneDrive during their final weeks. The solution must correlate this activity with the employee's resignation status from HR and generate risk-scored alerts for investigation. Which Microsoft Purview solution should the officer configure?

Accepted Answer

Insider Risk Management using a data theft by departing users policy with an HR connector

Answer

Data Loss Prevention (DLP) with a policy that blocks downloads of documents labeled Confidential

Answer

Communication Compliance with a policy that monitors outbound email attachments

Answer

Data Lifecycle Management with a retention policy that preserves research documents