Question

Your organization uses Microsoft Purview Insider Risk Management and wants to automatically apply stricter DLP policies to users who show elevated risky behavior, without requiring an analyst to manually adjust each user's controls. You plan to enable Adaptive Protection. Which mechanism does Adaptive Protection use to determine which users receive the more restrictive DLP enforcement?

Accepted Answer

Insider risk levels (Elevated, Moderate, Minor) derived from insider risk policy activity, which are mapped to DLP policy conditions

Answer

Microsoft Entra risk detections and sign-in risk scores calculated by Identity Protection

Answer

Sensitivity label priority order assigned to content the user accesses

Answer

Microsoft Secure Score improvement actions assigned to each user's group