Explanation:

Communications Compliance uses OCR (optical character recognition) and machine learning to detect offensive or risky text inside images , including those in SharePoint and OneDrive.
By default, Communications Compliance pseudonymizes user identities to reduce investigator bias. Admins can later deanonymize if needed.
It does not add disclaimers. It silently monitors communications and flags policy violations; disclaimers are handled by Exchange transport rules, not Communications Compliance.

The correct answer is B. the Microsoft Defender portal. Microsoft Purview DLP policies can generate alerts when rule conditions are matched. Microsoft states that DLP alerts can be investigated and managed in both Microsoft Defender XDR and the Microsoft Purview portal, but the Defender XDR dashboard is the recommended location for investigating and managing DLP alerts. That fits the requirement to view alert details and understand how the alert relates to other alerts, because Defender provides the incident and alert investigation experience. Microsoft Intune is used for endpoint and app management. Microsoft Entra is used for identity and access administration. The Microsoft 365 admin center is used for tenant administration and reporting, not DLP alert correlation.

Explanation:

The correct selections are Yes, Yes, No. Microsoft Purview sensitivity labels are used to classify and protect organizational data. Microsoft documents that sensitivity labels can protect content such as documents and emails, and it explicitly states that documents and emails can have sensitivity labels applied. Microsoft also supports sensitivity labels for containers, including Microsoft Teams, Microsoft 365 Groups, SharePoint sites, Viva Engage communities, and Loop workspaces. Therefore, a SharePoint site can be labeled, and an Exchange email message can be labeled. Windows 11 devices are different: they are managed and protected through endpoint management and security solutions such as Microsoft Intune and Microsoft Defender for Endpoint. Sensitivity labels apply to supported content and containers, not directly to Windows device objects.

The correct answer is C because Microsoft explains that authorization is the process of determining whether an authenticated identity is allowed to access a resource . Microsoft Learn distinguishes authorization from authentication by stating that authentication proves who you are, while authorization decides what you can access or do after identity has been established. In Microsoft 365 and the Microsoft identity platform, authorization commonly involves permissions, scopes, roles, and consent that control access to data and services such as Microsoft Graph, Exchange, SharePoint, or Teams.
Option A is incorrect because it refers more to external identity validation or federation concepts, not authorization itself. Option B describes authentication , not authorization, since it is about verifying identity claims. Option D describes a control such as multifactor authentication or Conditional Access requirements, which can happen before access is granted, but that still is not the definition of authorization. Authorization begins after identity verification and focuses on whether the identity has the right permissions for the requested resource.

The correct answer is A. Data access governance in the SharePoint admin center . Microsoft Learn documents Data access governance reports in the SharePoint admin center as the reporting solution used to understand data exposure, including permission structure and sharing link activity . Microsoft specifically states that the site permissions snapshot report provides visibility across SharePoint and OneDrive sites , helping administrators understand current permissions exposure, and that separate reports are created for SharePoint and OneDrive . Microsoft also documents sharing links activity reports as part of Data access governance for monitoring link-sharing activity, and notes that OneDrive support is available through PowerShell for those reports. Together, this is the Microsoft reporting capability aligned with permissions and active sharing links for OneDrive content.
The other options do not fit this requirement. Microsoft 365 admin center reports focus mainly on usage and activity reporting, not detailed permissions and sharing-link governance. Defender Audit is for security investigation activity, and Purview eDiscovery is for legal and investigative content search, not for generating OneDrive permissions and sharing-link governance reports. Therefore, the best Microsoft- documented answer is Data access governance in the SharePoint admin center .