You have a Microsoft 365 ES subscription. You have a Microsoft SharePoint Online document library that contains Microsoft Word and Excel documents. The documents contain the following types of information: • Credit card numbers • Physical addresses in the UK • National hearth service numbers from the UK • Sensitive projects that contain the following words: Project Tailspin. Project Contoso, and Project falcon You have email messages m Microsoft Exchange Online that contain the following information types: • Credit card numbers • User sign-in credentials • National health service numbers from the UK You plan to use sensitive information types (SITs) for compliance policies. What is the minimum number of SITs required to classify all the information types?

To classify all the specified information, a minimum of five Sensitive Information Types (SITs) are required. Four of these are built-in SITs provided by Microsoft, and one must be a custom SIT.

1. Credit Card Number: A built-in SIT.

2. U.K. National Health Service Number: A built-in SIT.

3. All Physical Addresses: A built-in SIT that can detect UK addresses.

4. User Credentials: A built-in SIT for sign-in information.

5. Custom Project SIT: A single custom SIT can be created using a keyword list to detect all three project names ("Project Tailspin," "Project Contoso," "Project Falcon").

This combination covers all requirements with the minimum number of SITs.

A. 2: This is insufficient as it cannot cover the five distinct categories of sensitive information described in the scenario.

C. 7: This is incorrect. It likely results from counting each project keyword as a separate SIT, which is inefficient, or by double-counting repeated information types.

D. 10: This number is arbitrarily high and does not align with the principle of using the minimum number of SITs required.

1. Microsoft Learn. (2024). Sensitive information type entity definitions. This official documentation lists the built-in SITs

including "Credit Card Number

" "U.K. National Health Service (NHS) Number

" "All Physical Addresses

" and "User Credentials."

URL: https://learn.microsoft.com/en-us/purview/sensitive-information-type-entity-definitions

2. Microsoft Learn. (2024). Create custom sensitive information types in the Microsoft Purview compliance portal. This document explains that a single custom SIT can be configured with a list of keywords

making it unnecessary to create separate SITs for each project name.

URL: https://learn.microsoft.com/en-us/purview/create-custom-sensitive-information-types