The Content explorer (formerly referred to as Data explorer) in the Microsoft Purview compliance portal provides a detailed, near real-time view of items identified as containing sensitive information types or belonging to specific sensitivity labels. It allows administrators to filter content by location (SharePoint, OneDrive, Exchange), sensitive information type, and other metadata. This meets the requirement to understand where regulated data resides without copying it, and the results can be exported for external analysis.

A. A DLP policy simulation tests the potential impact of a policy before enforcement; it is not designed for comprehensive data exploration and discovery.

B. Relying on manual user labeling is inconsistent and does not provide the systematic, comprehensive snapshot of all existing sensitive data that is required.

D. Searching audit logs is an indirect method that shows user activity. It is not an efficient or direct way to get a snapshot of all sensitive data at rest.

1. Microsoft. (2024). Get started with content explorer. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/data-classification-content-explorer. (See sections: "Prerequisites for accessing content explorer" and "How to use content explorer").

2. Microsoft. (2024). View content in content explorer. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/data-classification-content-explorer-view-content. (See section: "Filter").