Governance, Security and Compliance22% of the exam
DLP rules and PII visibility in Slack Connect
How to limit personally identifiable information in Slack: native DLP rules, actions, scope and blind spots, the DLP dashboard, email display, Slack Connect profile details per organization, and what external organizations' data looks like in exports, the Discovery API and EKM.
Given a scenario, assess and determine personally identifiable information (PII) sharing in Slack.
~7 min read · 12 practice questions ·
What the exam expects
- Build a native DLP rule: preconfigured or custom regex, the action (alert, warn, hide) and the scope (Slack Connect, workspaces, conversation types).
- Predict what DLP will not catch (images, profile fields, canvases in Slack Connect) and where warnings cannot appear.
- Act on violations in the DLP dashboard: restore false positives, delete real ones.
- Limit what external organizations see: email display and Slack Connect member profile details, including per-organization customization.
- Explain what exports, the Discovery API and Enterprise Key Management (EKM) do with external people's data.
Key terms:
- PII: personally identifiable information, such as national identifiers, card numbers or email addresses.
- Slack DLP: native data loss prevention on Enterprise plans, run by members with the DLP Admin system role.
- Tombstone: a DLP hide action that keeps a message or file out of view until it is reviewed.
- Basic details / Standard work details: the two profile visibility levels for people outside your organization in Slack Connect.
- Enterprise org: an Enterprise organization (Enterprise Grid or Enterprise+ plan); DLP is configured in its Organization settings.
Key facts
DLP plan and role
- Detail
- Enterprise plans; DLP Admin, assigned by Org Primary Owner or Roles Admin
Preconfigured categories
- Detail
- Credit card numbers, national identifiers, secrets
Custom rules
- Detail
- PCRE regex
DLP actions
- Detail
- Alert only, warn with custom text, hide until reviewed
No warnings on
- Detail
- Canvases and snippets
Not scanned
- Detail
- Images and other non-text files, profile data, canvases in Slack Connect, files over 100 MB
Alert expiry
- Detail
- 90 days
Email display default
- Detail
- Visible to the org and external organizations
Slack Connect profile default
- Detail
- Basic details: name and photo
Per-organization profile setting
- Detail
- Business+ and Enterprise plans
Discovery API and emails
- Detail
- Returns external emails regardless of email display
- Why did a DLP rule set to warn record an alert but show no warning on a canvas?
- When should a DLP Admin restore a message instead of deleting it?
- Which email display option keeps addresses visible to employees but hidden from Slack Connect partners?
- What does an export include about people from an external organization?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Slack Administrator pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 32 lessons of the Slack Administrator guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Inline practice questions and one-click topic practice (12 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Unlimited timed practice exams