Microsoft Certified: Information Protection Administrator Associate SC-400 Book

To restrict the Confidential - Finance label to only the members of the Finance Team group, follow these steps:

Create a Sensitivity Label:

Log in to the Microsoft Purview portal or the Microsoft Purview compliance portal as an admin.

Navigate to Sensitivity labels and create a new label called “Confidential - Finance”.

Specify the appropriate settings for this label, including encryption, content markings, and permissions1.

Configure Encryption Settings:

When creating the label, ensure that you configure the encryption settings.

Choose either to assign permissions now (where you determine exactly which users get which permissions) or allow users to assign permissions when they apply the label to content2.

Assign the Label to the Finance Team Group:

In the Microsoft Purview portal, go to the Groups section.

Select the Finance Team group.

Under Settings, choose Sensitivity labels.

Add the “Confidential - Finance” label to this group.

Only members of the Finance Team will now have access to this label3.

Test the Configuration:

Verify that only members of the Finance Team can apply the “Confidential - Finance” label to documents, emails, or other content.

To set up a retention policy for Microsoft SharePoint files containing the word “Falcon,” follow these steps:

Create a Retention Label:

Retention labels allow you to specify retention periods for content. Go to your SharePoint site or library where you want to apply the policy.

Open the document library settings.

Under “Permissions and Management,” select “Apply label to items in this list or library.”

Choose the retention label that corresponds to the desired retention period (e.g., “Falcon Retention - 2 years”).

Configure the Retention Label:

Specify the retention period (in this case, 2 years).

Define the action to be taken after the retention period (e.g., move to recycle bin).

Apply the Retention Label:

Tag the relevant content (files containing the word “Falcon”) with the retention label.

The policy will automatically retain the files for two years from their creation date and then delete them.

To create a label that adds a watermark of “Project Falcon” in red, size-12 font diagonally across the documents, follow these steps:

Create a Sensitivity Label:

Log in to the Microsoft Purview portal or the Microsoft Purview compliance portal as an admin.

Navigate to Sensitivity labels and create a new label called “Project Falcon”.

Specify the appropriate settings for this label, including encryption, content markings, and permissions.

Configure Content Markings (Watermark):

When creating the label, configure the content markings section.

Choose “Watermark” and set the text to “Project Falcon”.

Select the color as red and font size as 12.

Set the watermark position to diagonal across the document.

Assign the Label:

Assign the “Project Falcon” label to the relevant documents within the Falcon project.

Users who apply this label will automatically add the specified watermark to their documents.

Create a Custom Content Type:

Go to your SharePoint Online site.

Click on Settings (gear icon) and select Site settings.

Under Web Designer Galleries, choose Site content types.

Create a new content type (e.g., “Product1 Classification”) based on the Document parent content type.

Add a custom column (e.g., “Classification”) to this content type.

Apply the Content Type to Document Libraries:

Navigate to the document library where the files are stored.

Click on Library settings.

Under General Settings, select Advanced settings.

Choose Yes for “Allow management of content types.”

Add your custom content type (“Product1 Classification”) to the library.

Manually Classify Files:

Upload or edit a file in the library.

In the file properties, select the Classification field and set it to “Product1.”

Permissions and Encryption:

Ensure that all authenticated users have at least View permissions on the library.

For encryption, SharePoint Online automatically encrypts files at rest using BitLocker disk-level encryption.

Files classified as “Product1” will be encrypted and accessible only to authorized users.