Question

A compliance analyst opens the Microsoft Purview portal and sees a large backlog of Data Loss Prevention (DLP) alerts. Management wants the analyst to focus first on the incidents most likely to represent a serious data leak. Within the DLP alerts dashboard, which attribute should the analyst use to prioritize which alerts to investigate first?

Accepted Answer

The alert severity level assigned by the DLP policy rule that was triggered

Answer

The alphabetical order of the policy names that generated the alerts

Answer

The total number of retention labels applied across the tenant

Answer

The Compliance Manager improvement action score for the organization