Question

Your organization plans to deploy the Microsoft Purview Information Protection scanner to a large on-premises file share that contains millions of documents. Before enforcing any labeling or protection, security leadership wants a report of which files contain sensitive information and which sensitivity labels would apply, without altering any files. What should you configure for the initial scanner content scan job?

Accepted Answer

Set the content scan job to Enforce = Off (discovery mode) so the scanner reports findings without applying labels

Answer

Set the content scan job to enforce policy, with 'Label files based on content' enabled

Answer

Deploy the Purview Information Protection client in user mode on each file server so labeling occurs interactively

Answer

Create an auto-labeling policy in the Purview portal scoped to SharePoint and Exchange to inventory the file share