You have a Microsoft 365 E5 subscription. You need to recommend a solution to add a watermark to email attachments that contain sensitive data. What should you include in the recommendation?

Microsoft Information Protection (MIP), part of the Microsoft Purview suite, is the solution designed to discover, classify, and protect sensitive data. A core feature of MIP is the use of sensitivity labels. These labels can be configured to apply protection settings and content markings, including watermarks, headers, and footers, to documents and emails. When a file or email is identified as containing sensitive data (either manually by a user or automatically based on policy), the appropriate sensitivity label is applied, which in turn adds the configured watermark. This directly fulfills the requirement of the scenario.

A. Microsoft Defender for Cloud Apps: This is a Cloud Access Security Broker (CASB) focused on monitoring and controlling data flow and threats within cloud applications, not directly applying content markings.
B. insider risk management: This solution correlates user activity signals to detect and manage potential internal risks; it does not apply watermarks to content.
D. Azure Purview: While Microsoft Information Protection is now part of the broader Microsoft Purview data governance platform, "Azure Purview" historically referred to the data cataloging and mapping service. MIP is the specific component that handles content marking.

1. Microsoft Learn. "Apply content marking with sensitivity labels." Microsoft Purview documentation. Under the section "What content markings can be applied," it explicitly states: "When you apply a sensitivity label to a document or email, you can add headers, footers, and watermarks to the content."

2. Microsoft Learn. "Learn about sensitivity labels." Microsoft Purview documentation. In the introductory section, it lists the capabilities of sensitivity labels: "After a sensitivity label is applied to content, any configured protection settings for that label are enforced on the content. You can configure a sensitivity label to apply... Content markings (such as headers, footers, or watermarks)."

3. Microsoft Learn. "What is Defender for Cloud Apps?". Microsoft Defender for Cloud Apps documentation. This document describes the service as a CASB that provides visibility and control over cloud apps, confirming its primary purpose is different from content marking.

4. Microsoft Learn. "Learn about insider risk management." Microsoft Purview documentation. This source details the solution's focus on detecting, investigating, and acting on risky user activities, which is distinct from applying protection features like watermarks to documents.