Data-35020: Auto-Labeling Enforcement Mode Enabled

[sandeepjha000]

adding test 35020

[Copilot]

Pull request overview

This pull request adds a new test (35020) to assess whether auto-labeling policies in Microsoft 365 are configured in enforcement mode rather than simulation mode. The test verifies that at least one auto-labeling policy is actively applying labels to content across Microsoft 365 workloads.

Changes:

• Added Test-Assessment.35020.ps1 implementing the auto-labeling enforcement mode check
• Added Test-Assessment.35020.md providing remediation guidance and context

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
src/powershell/tests/Test-Assessment.35020.ps1	Implements test logic to query auto-labeling policies, categorize them by mode (enforcement/simulation/disabled), and generate detailed reports with workload coverage analysis
src/powershell/tests/Test-Assessment.35020.md	Provides comprehensive documentation explaining the security rationale for enforcement mode and step-by-step remediation instructions

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[alexandair]

LGTM