
Ultimate access to all questions.
Your organization operates in the European Union and is subject to the General Data Protection Regulation (GDPR). You are tasked with designing a comprehensive data governance solution using Microsoft Purview to ensure compliance with GDPR's stringent data protection principles. The solution must address data discovery, classification, access control, and demonstrate compliance through reporting. Considering the need for scalability, cost-effectiveness, and adherence to compliance requirements, which of the following approaches best utilizes Microsoft Purview to meet these objectives? (Choose one option.)
A
Implement Microsoft Purview to automatically classify and label all data across the organization, apply data loss prevention policies to sensitive data, and use Azure Policy to enforce compliance standards across all Azure resources.
B
Leverage Microsoft Purview to continuously monitor data access and usage across cloud and on-premises environments, generate real-time alerts for unauthorized access attempts, and produce compliance reports for auditing purposes.
C
Utilize Microsoft Purview to discover and catalog all personal data stored across the organization's cloud and on-premises environments, classify this data based on sensitivity, implement role-based access controls, and generate detailed reports to demonstrate compliance with GDPR requirements.
D
Deploy Microsoft Purview to conduct regular security assessments and penetration testing on all data storage solutions, identify vulnerabilities that could lead to data breaches, and apply patches or updates to mitigate identified risks.