Question

Contoso stores sensitive project files in a sanctioned third-party SaaS cloud storage app that is connected to Microsoft Defender for Cloud Apps via the API connector. The security team wants files in that app that contain credit card numbers to automatically receive the 'Highly Confidential' sensitivity label, which is already published to users. What must you configure to accomplish this?

Accepted Answer

A Defender for Cloud Apps file policy that inspects for the credit card sensitive info type and applies the sensitivity label as a governance action

Answer

An auto-labeling policy in the Microsoft Purview portal scoped to SharePoint Online and OneDrive locations

Answer

Deploy the Purview Information Protection scanner and point a content scan job at the SaaS app's storage repository

Answer

A DLP policy in Microsoft Purview with the third-party cloud app selected as the location and a restrict-access action