DRAG DROP Your company has aMicrosoft 365 subscription. You need to implement security policies to ensure that sensitive data is protected. Which tools should you use? To answer, drag the appropriate tools to the correct scenarios. Each tool may be used once, more than once, or notat all. You may need to drag the split bar between panes or scroll to view content.

Identity and Access Management (IAM) is a security framework that defines and manages the roles and access privileges of individual network entities. It's the logical choice for enabling multi-factor authentication (MFA) via the Microsoft Authenticator app, as MFA is a core component of verifying a user's identity before granting them access. Information Rights Management (IRM) is designed to protect sensitive information from unauthorized use. Classifying documents and applying restrictions, such as preventing copying or printing, is a direct function of IRM. Finally, Compliance Manager provides a dashboard with data-protection recommendations and generates reports on an organization's compliance posture, making it the appropriate tool for both data-protection dashboards and providing reports to auditors.

Microsoft Docs. "What is Identity and Access Management?" Microsoft Learn. https://learn.microsoft.com/en-us/microsoft-365/enterprise/what-is-iam?view=o365-worldwide. Section: "Core Concepts of IAM", Paragraph 2. Explains that IAM includes managing user identities and access control, which encompasses multi-factor authentication.

Microsoft Docs. "Information Rights Management in SharePoint Server." Microsoft Learn. https://learn.microsoft.com/en-us/microsoft-365/compliance/information-rights-management-sharepoint-online?view=o365-worldwide. Section: "What is IRM?". This source defines IRM's purpose as protecting sensitive information from being accessed, viewed, or used by unauthorized people, aligning with the "Classify documents" scenario.

Microsoft Docs. "Microsoft Purview Compliance Manager." Microsoft Learn. https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide. Section: "Key Features". This resource states that Compliance Manager provides a compliance score, improvement actions (recommendations), and generates reports for auditors, directly supporting the last two scenarios.

Microsoft Docs. "Manage permissions in Microsoft 365." Microsoft Learn. https://learn.microsoft.com/en-us/microsoft-365/admin/manage-licenses-and-permissions/manage-permissions?view=o365-worldwide. This documentation provides a broader context for how different tools, including IAM, work together to manage permissions and access to data within the Microsoft 365 environment.