Sensitivity labels from Microsoft Purview are a core component of its information protection solution. They function by applying classifications to data (e.g., 'Confidential,' 'Internal'). Based on the label's configuration, specific protection policies are enforced, such as applying encryption, adding visual watermarks, and restricting access to authorized users. This ensures that sensitive information remains protected regardless of where it is stored or shared, helping organizations meet compliance and security requirements across the Microsoft 365 ecosystem.

A. This describes the function of Microsoft Purview retention policies and labels, which manage the data lifecycle, not sensitivity classification and protection.

B. This describes network monitoring tools, which are unrelated to data classification and protection services like Microsoft Purview Information Protection.

C. This is an administrative function for managing development environments, typically done in the Azure or Microsoft 365 admin centers, not with sensitivity labels.

1. Microsoft Learn. (2024). Learn about sensitivity labels. "Use sensitivity labels to classify and protect your organization's data, while making sure that user productivity and their ability to collaborate isn't hindered... The label can apply protection, which includes encryption and content markings." Section: What sensitivity labels can do.

2. Microsoft Learn. (2024). Manage sensitivity labels in Microsoft Purview. "Sensitivity labels from Microsoft Purview Information Protection let you classify and protect your organization's data." Introduction paragraph.

3. Microsoft Learn. (2024). Restrict access to content by using sensitivity labels to apply encryption. "When you assign a sensitivity label that's configured to apply encryption to a document or email, the content is encrypted." Section: How encryption protection works.