Tools Used
- Microsoft Learn Sandbox
- Microsoft Purview Portal
- Microsoft 365 Compliance Center
- Microsoft Defender Portal
Steps Taken
- Signed into Microsoft Purview portal as MOD Administrator.
- Created test content in Exchange, SharePoint, and OneDrive.
- Applied sensitivity labels manually and verified automatic labeling triggers.
- Tested DLP policy enforcement by attempting restricted actions (e.g., sharing, printing).
- Reviewed audit logs to confirm activity tracking and policy hits.
- Validated alerts and insights in Microsoft Defender portal.
- Documented results and confirmed alignment with organizational compliance goals.
Outcome
Information protection configuration successfully validated. Microsoft 365 services enforce labeling, DLP, and auditing policies as intended, supporting secure and compliant data handling.
Certification Alignment
SC-401 Domain 3.1 – Validate Information Protection and Governance
Sandbox Link
Lab 13 – Validate Information Protection Configuration