Question

Contoso has deployed the Purview Information Protection scanner in discovery mode against several on-premises file shares. The results show many documents that match a sensitive information type but have no sensitivity label. The compliance team now wants the scanner to automatically apply the appropriate sensitivity label and its associated encryption to matching files during subsequent scans. Which change must you make to accomplish this?

Accepted Answer

Set the content scan job's enforcement setting to On so the scanner applies labels according to the configured auto-labeling policy conditions.

Answer

Publish a sensitivity label policy that includes the service account, then rerun the scan without modifying the content scan job.

Answer

Enable OCR support on the scanner cluster so that image-based files can be relabeled during the next scan.

Answer

Change the scanner's authentication from a service account to a managed identity so it gains write permission to the file shares.