A compliance officer at an insurance group must build an inventory of where sensitive information — such as policyholders' identification numbers and health details — is stored across databases, file shares, and on-premises systems. She wants automated scanning that discovers this data and applies classification across the whole estate. Which service meets this requirement?

1. A. Microsoft Defender for Cloud, which assesses the security posture of cloud workloads and issues recommendations 💬 A
2. B. Azure Migrate, which discovers on-premises servers and assesses their readiness for migration 💬 B
3. C. Azure Policy, which audits resource configurations against organizational standards 💬 C
4. D. Microsoft Purview, which scans data sources across the estate and applies sensitive data classification ✓ D

Reveal answer

Correct answer: Microsoft Purview, which scans data sources across the estate and applies sensitive data classification

Reference: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/2-describe-purpose-microsoft-purview