Microsoft Purview Data Loss Prevention (DLP) helps organizations prevent the unintentional or unauthorized sharing of sensitive information. DLP policies identify sensitive items by using deep content analysis, such as matching keywords, regular expressions, or data identifiers (e.g., credit card numbers). When a policy match is detected, DLP can automatically apply protective actions, such as blocking the sharing of the content, encrypting it, or displaying a policy tip to the user. This helps enforce compliance requirements and protect intellectual property across Microsoft 365 services.

A. Automatically backs up all files to on-premises storage: This describes a data backup or archiving solution, which is a separate function from Data Loss Prevention.

C. Disables encryption applied by sensitivity labels: DLP works in conjunction with encryption to protect data; it does not disable it.

D. Allows external sharing of any content without restrictions: DLP does the opposite; it identifies and applies restrictions to the sharing of sensitive content.

1. Microsoft Learn. (2024). Learn about data loss prevention. Microsoft Docs. Retrieved from https://learn.microsoft.com/en-us/purview/dlp-learn-about-dlp. The overview states, "you can use DLP policies to identify, monitor, and automatically protect sensitive items across Microsoft 365 services."

2. Microsoft Learn. (2024). How DLP works. Microsoft Docs. Retrieved from https://learn.microsoft.com/en-us/purview/dlp-how-it-works. This section explains that DLP policies are "a set of conditions... and actions" to prevent sensitive item exfiltration.