Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 111:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains two users named Admin1 and User1, a Microsoft SharePoint Online site named Site1, and a retention label named Retention1.

  The role assignments for Site1 are shown in the following table.

  

  Site1 includes a file named File1. Rentention1 has the following settings:

  1.

  Retain items for a specific period: Retention period: 7 years

  2.

  During the retention period: Mark items as a record

  3.

  At the end of the retention period: Delete items automatically

  Rentention1 is published to Site1.

  User1 applies Retention1 to File1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 112:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses data loss prevention (DLP) to protect sensitive information.

  You need to create scheduled reports that generate:

  1.

  DLP policy matches reported over the shortest frequency of time

  2.

  DLP incidents reported over the longest frequency of time

  Which frequency should you configure for each report? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 113:

  HOTSPOT

  You have a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com.

  OneDrive stores files that are shared with external users. The files are configured as shown in the following table.

  

  You create a data loss prevention (DLP) policy that applies to the content stored in OneDrive accounts. The policy contains the following three rules:

  Rule1

  1.

  Conditions: Label1, Detect content that's shared with people outside my organization

  2.

  Actions: Restrict access to the content for external users

  3.

  User notifications: Notify the user who last modified the content

  4.

  User overrides: On

  5.

  Priority: 0

  Rule2:

  1.

  Conditions: Label1 or Label2

  2.

  Actions: Restrict access to the content

  3.

  Priority: 1

  Rule3:

  1.

  Conditions: Label2, Detect content that's shared with people outside my organization

  2.

  Actions: Restrict access to the content for external users

  3.

  User notifications: Notify the user who last modified the content

  4.

  User overrides: On

  5.

  Priority: 2

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 114:

  HOTSPOT

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the groups shown in the following table.

  

  The domain is synced to an Azure AD tenant that contains the groups shown in the following table.

  

  You create a sensitivity label named Label1.

  You need to publish Label1.

  To which groups can you publish Label1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 115:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You create an adaptive scope named Scope1 as shown in the following exhibit.

  

  You create a retention policy named Policy1 that includes Scope1.

  To which three locations can you apply Policy1? To answer, select the appropriate locations in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Exchange email

  You can apply a retention policy to mailboxes in Exchange Online.

  Box 2: SharePoint sites

  Use a retention policy to manage the data for your organization by deciding proactively whether to retain content, delete content, or retain and then delete the content.

  A retention policy lets you do this very efficiently by assigning the same retention settings at the container level to be automatically inherited by content in that container. For example, all items in SharePoint sites, all email messages in users'

  Exchange mailboxes, all channel messages for teams that are used with Microsoft Teams.

  Box 3: Teams channel messages

  Reference:

  https://learn.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/apply-retention-policy

  https://learn.microsoft.com/en-us/microsoft-365/compliance/create-retention-policies

• Question 116:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1 and the users shown in the following table.

  

  Site1 includes a file named File1.docx.

  You create two retention labels named Retention1 and Retention2.

  You publish Retention1 to the following locations:

  Exchange email Included: User1 Microsoft 365 Groups Included: Group2

  You publish Retention2 to the following locations:

  Exchange email Included: All recipients SharePoint sites Included: Site1

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  User1 is included in Retention1.

  All recipients (also User1) is included in Retention2.

  Note: Advantages of using static scopes:

  Simpler configuration if you want all instances automatically selected for a workload.

  For "includes" and "excludes", this choice can be a simpler configuration initially if the numbers of instances that you have to specify are low and do not change. However, when these number of instances start to increase and you have

  frequent changes in your organization that require you to reconfigure your policies, adaptive scopes can be simpler to configure and much easier to maintain.

  Box 2: No

  Only User1 is included in Retention1.

  Box 3: Yes

  User2 can apply Retention2.

  Retention2 includes Site1.

  Site1 includes a file named File1.docx.

  Reference: https://learn.microsoft.com/en-us/microsoft-365/compliance/retention

• Question 117:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1 and the users shown in the following table.

  

  You have a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.

  

  You apply DLP1 to Site1.

  User1 uploads a file named File1 to Site1. File1 does NOT match any of the DLP1 rules. User2 updates File1 to contain data that matches the DLP1 rules.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  Note: Actions Any item that makes it through the conditions filter will have any actions that are defined in the rule applied to it. You'll have to configure the required options to support the action. For example, if you select Exchange with the Restrict access or encrypt the content in Microsoft 365 locations action you need to choose from these options:

  Block users from accessing shared SharePoint, OneDrive, and Teams content

  *

  Block everyone. Only the content owner, last modifier, and site admin will continue to have access.

  *

  etc.

  Box 2: Yes

  User2 is the last modifier of the file.

  Box 3: Yes

  Users assigned the SharePoint Administrator role have access to the SharePoint admin center and can create and manage sites (previously called "site collections"), designate site admins, manage sharing settings, and more.

  Reference: https://learn.microsoft.com/en-us/sharepoint/sharepoint-admin-role

• Question 118:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You receive the data loss prevention (DLP) alert shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: sent to a manager for approval

  Actions taken: GenerateAlert

  User overrode policy: Yes

  Manager approved

  Box 2: overrode Rule1

  Rule1 was overridden.

  Note: Policy Details:

  Policy1

  Rule1

  Note 2: User Override support

  Here are some fine points to understand about using a policy tip to override a rule:

  The option to override is per rule, and it overrides all of the actions in the rule (except sending a notification, which can't be overridden).

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/use-notifications-and-policy-tips

• Question 119:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You have the data loss prevention (DLP) rule match shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Was forwarded to another user for approval We see Rule actions: ExModerate. The "moderation" feature we are using is the DLP Action "Forward the message for approval to specific approvers". The term "moderation" comes from the "ExModerate" Rule Action that is shown in the DLP event Activity Details screen in the Data Loss Prevention Activities Explorer. See attached DLP exmoderate screenshot to see how this looks in my tenant.

  As you can see from the Activity Details, you are unable to see the result of the ExModerate Rule Action. Did the approver approve or deny the message? I cannot see that in the Activity Details.

  Box 2: enforce DLP rules

  Policy mode is enabled.

  Reference: https://techcommunity.microsoft.com/t5/exchange/exchange-unified-dlp-moderation-logging-and-reporting/m-p/2416894

• Question 120:

  HOTSPOT

  Your company has offices in 30 countries.

  The company has a Microsoft 365 E5 subscription that uses Microsoft SharePoint Online.

  You create SharePoint sites for each department and country. The sites are named by using a naming convention of [Department]-[Country], for example, Sales-France.

  You need to prevent files stored on the sites of the sales department from being deleted permanently for five years. The solution must meet the following requirements:

  Only affect the files on the sales department sites.

  Minimize administrative effort.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: A retention policy

  You can very efficiently apply a single policy to multiple locations, or to specific locations or users.

  Note: Retention policies can be applied to the following locations:

  Exchange email

  SharePoint site

  OneDrive accounts

  Microsoft 365 Groups

  Skype for Business

  Exchange public folders

  Teams channel messages

  Teams chats

  Teams private channel messages

  Yammer community messages

  Yammer user messages

  * Incorrect:

  Auto-Label Retention Policy are based on Sensitivity Labels and are used to mark documents and files as containing important information.

  Box 2: A static scope A static scope doesn't use queries and is limited in configuration in that it can apply to all instances for a specified location, or use inclusion and exclusions for specific instances for that location. These three choices are sometimes referred to as "org-wide", "includes", and "excludes" respectively.

  Incorrect:

  * Adaptive scope An adaptive scope uses a query that you specify, so the membership isn't static but dynamic by running daily against the attributes or properties that you specify for the selected locations. You can use multiple adaptive scopes with a single policy.

  Reference: https://learn.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide