Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 1:

  You have a Microsoft SharePoint Online site named Site1 that contains the files shown in the following table.

  

  You have a data loss prevention (DLP) policy named DLP1 that has the advanced DLP rules shown in the following table.

  

  You apply DLP1 to Site1.

  Which policy tips will appear for File2?

  A. Tip1 only

  B. Tip2 only

  C. Tip3 only

  D. Tip1 and Tip2 only

  Correct Answer: B

• Question 2:

  You have a Microsoft 365 E5 tenant that has devices onboarded to Microsoft Defender for Endpoint as shown in the following table.

  

  You plan to start using Microsoft 365 Endpoint data loss protection (Endpoint DLP). Which devices support Endpoint DLP?

  A. Device1 only

  B. Device1 and Device2 only

  C. Device1 and Device4 only

  D. Device1, Device2, and Device4 only

  E. Device1, Device2, Device3, and Device4

  Correct Answer: D

• Question 3:

  You have a Microsoft 365 tenant that has a retention label policy. You need to configure the policy to meet the following requirements:

  1.

  Prevent the disabling or deletion of the policy.

  2.

  Ensure that new labels can be added.

  3.

  Prevent the removal of labels. What should you do?

  A. Import a file plan.

  B. Enable insider risk management.

  C. Enable the regulatory record option.

  D. Create a preservation lock.

  Correct Answer: D

• Question 4:

  You have a Microsoft 365 E5 subscription that contains the adaptive scopes shown in the following table.

  

  You create the retention policies shown in the following table.

  

  Which retention policies support a preservation lock?

  A. RPolicy2 only

  B. RPolicy3 only

  C. RPolicy1 and RPolicy2 only

  D. RPolicy1 and RPolicy3 only

  E. RPolicy1, RPolicy2, and RPolicy3

  Correct Answer: B

• Question 5:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You have the core eDiscovery cases shown in the following table.

  

  You need to ensure that Admin3 can create holds in Case1 and Case2. The solution must use the principle of least privilege. To what should you add Admin3?

  A. the Global Administrator role

  B. the eDiscovery Manager role group

  C. the Compliance Manager Contributors role group

  D. the eDiscovery Administrator role group

  Correct Answer: D

• Question 6:

  You have a Microsoft 365 E5 subscription.

  You need to ensure that encrypted email messages sent to an external recipient can be revoked or will expire within seven days.

  What should you configure first?

  A. a custom branding template

  B. a mail flow rule

  C. a Conditional Access policy

  D. a sensitivity label

  Correct Answer: A

• Question 7:

  You have Microsoft 365 E5 subscription that uses data loss prevention (DLP) to protect sensitive information.

  You have a document named Form.docx.

  You plan to use PowerShell to create a document fingerprint based on Form.docx.

  You need to first connect to the subscription.

  Which cmdlet should you run?

  A. Connect-SPOService

  B. Connect-IPPSSession

  C. Connect-AzureAD

  D. Connect-ExchangeOnline

  Correct Answer: B

• Question 8:

  You have a Microsoft 365 E5 subscription that contains a device named Device1. You need to enable Endpoint data loss prevention (Endpoint DLP) for Device1. What should you do first in the Microsoft Purview compliance portal?

  A. Turn on device onboarding.

  B. Add a Microsoft Purview Information Protection scanner cluster.

  C. Onboard Device1 to Microsoft Purview.

  D. Create a Microsoft Purview Information Barriers (IBs) segment.

  E. Enable Microsoft Priva Privacy Risk Management.

  Correct Answer: A

  Under "Onboarding Windows 10 or Windows 11 devices" it says:

  "1. Open the Microsoft Purview compliance portal. Choose Settings > Device onboarding > Devices.

  2.

  Choose Turn on device onboarding.

  3.

  Choose Onboarding to begin the onboarding process."

  So turning on the device onboarding would be the first step out of these options.

  https://learn.microsoft.com/en-us/purview/device-onboarding-overview

• Question 9:

  You have a Microsoft 365 E5 subscription.

  Users access their mailbox by using the following apps:

  1.

  Outlook Win32

  2.

  Outlook on the web

  3.

  Outlook for iOS and Android

  You create a data loss prevention (DLP) policy named DLP1 that has the following settings:

  1.

  Location: Exchange email

  2.

  Status: On

  3.

  User notifications: On

  4.

  Notify users in Office 365 service with a policy tip: Enabled

  Which apps display a policy tip when content is matched by using DLP1?

  A. Outlook Win32 only

  B. Outlook on the web only

  C. Outlook Win32 and Outlook on the web only

  D. Outlook Win32 and Outlook for iOS and Android only

  E. Outlook Win32, Outlook on the web, and Outlook for iOS and Android

  Correct Answer: C

• Question 10:

  You plan to create a new data loss prevention (DLP) policy named DIP1.

  DLP1 will be applied to the Exchange email location.

  You need to exclude two users named User1 and User2 from DLP1.

  What should you do first?

  A. Create an organization sharing policy in Microsoft Exchange.

  B. Create a mail flow rule in Microsoft Exchange.

  C. Create a distribution list that contains User1 and User2.

  D. Create an advanced DLP rule.

  Correct Answer: C

  https://learn.microsoft.com/en-us/purview/dlp-policy-reference#policy-scoping