Exam MS-101 topic 2 question 78 discussion

In Microsoft 365, you implement data loss prevention by defining and applying DLP policies. With a DLP policy, you can identify, monitor, and automatically protect sensitive items across: Microsoft 365 services such as Teams, Exchange, SharePoint, and OneDrive Office applications such as Word, Excel, and PowerPoint Windows 10 endpoints non-Microsoft cloud apps on-premises file shares and on-premises SharePoint.

I think it is C because you need to prevent the view

Correct

DLP https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-discovery-protection-reporting-in-office365-dev-test-environment

A bit tricky. In the conditions of a DLP policy, you can set a condition to either internally or externally shared but not both. The question doesn't tell you which one. I would say a Cloud App Security File policy could be the solution but I can't check at the moment. File Policies allow you to enforce a wide range of automated processes using the cloud provider's APIs. Policies can be set to provide continuous compliance scans, legal eDiscovery tasks, DLP for sensitive content shared publicly, and many more use cases. Defender for Cloud Apps can monitor any file type based on more than 20 metadata filters (for example, access level, file type).