Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 121:

  HOTSPOT

  You have a Microsoft 365 E5 tenant.

  You need to create a custom trainable classifier that will detect product order forms. The solution must use the principle of least privilege.

  What should you do first? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Start the opt-in process

  Prepare for a custom trainable classifier

  It's helpful to understand what's involved in creating a custom trainable classifier before you dive in.

  Timeline

  This timeline reflects a sample deployment of trainable classifiers.

  Opt-in is required the first time for trainable classifiers. It takes twelve days for Microsoft 365 to complete a baseline evaluation of your organizations content. Contact your global administrator to kick off the opt-in process.

  Box 2: Compliance Administrator

  Compliance Administrator role is required to train a classifier.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with

• Question 122:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You need to prevent users in the finance department from sharing files with users in the research department. Which type of policy should you configure?

  A. communication compliance

  B. information barrier

  C. Conditional Access

  D. insider risk management

  Correct Answer: B

• Question 123:

  Your company has a Microsoft 365 tenant that uses a domain named contoso.com.

  You are implementing data loss prevention (DLP).

  The company's default browser is Microsoft Edge.

  During a recent audit, you discover that some users use Firefox and Google Chrome browsers to upload files labeled as Confidential to a third-party Microsoft SharePoint Online site that has a URL of https:// m365x076709.sharepoint.com.

  Users are blocked from uploading the confidential files to the site from Microsoft Edge.

  You need to ensure that the users cannot upload files labeled as Confidential from Firefox and Google Chrome to any cloud services.

  Which two actions should you perform? Each correct answer presents part of the solution. (Choose two.)

  NOTE: Each correct selection is worth one point.

  A. From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add m365x076709.sharepoint.com as a blocked service domain.

  B. Create a DLP policy that applies to the Devices location.

  C. From the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings, add Firefox and Google Chrome to the unallowed browsers list.

  D. From the Microsoft 365 compliance center, onboard the devices.

  E. From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add contoso.com as an allowed service domain.

  Correct Answer: CD

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365- worldwide

• Question 124:

  You have a Microsoft 365 tenant that uses trainable classifiers.

  You are creating a custom trainable classifier.

  You collect 300 sample file types from various geographical locations to use as seed content. Some of the file samples are encrypted.

  You organize the files into categories as shown in the following table.

  

  Which file categories can be used as seed content?

  A. Category2, Category3, and Category5 only

  B. Category1 and Category3 only

  C. Category4 and Category6 only

  D. Category4 and Category5 only

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365- worldwide https://docs.microsoft.com/en-us/sharepoint/technical-reference/default-crawled-file-name-extensions-and-parsed-file-types

• Question 125:

  You need to test Microsoft Office 365 Message Encryption (OME) capabilities for your company. The test must verify the following information:

  1.

  The acquired default template names

  2.

  The encryption and decryption verification status Which PowerShell cmdlet should you run?

  A. Test-ClientAccessRule

  B. Test-Mailflow

  C. Test-OAuthConnectivity

  D. Test-IRMConfiguration

  Correct Answer: D

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message-encryption-capabilities? view=o365-worldwide

• Question 126:

  You have a Microsoft 365 E5 tenant that uses a domain named contoso.com.

  A user named User1 sends link-based, branded emails that are encrypted by using Microsoft Office 365 Advanced Message Encryption to the recipients shown in the following table.

  

  For which recipients can User1 revoke the emails?

  A. Recipient4 only

  B. Recipient1 only

  C. Recipient1, Recipient2, Recipient3, and Recipient4

  D. Recipient3 and Recipient4 only

  E. Recipient1 and Recipient2 only

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/revoke-ome-encrypted-mail?view=o365- worldwide

• Question 127:

  You create a custom sensitive info type that uses Exact Data Match (EDM).

  You plan to periodically update and upload the data used for EDM.

  What is the maximum frequency with which the data can be uploaded?

  A. twice per week

  B. twice per day

  C. once every six hours

  D. once every 48 hours

  E. twice per hour

  Correct Answer: B

• Question 128:

  A user reports that she can no longer access a Microsoft Excel file named Northwind Customer Data.xlsx. From the Cloud App Security portal, you discover the alert shown in the exhibit.

  

  You restore the file from quarantine.

  You need to prevent files that match the policy from being quarantined. Files that match the policy must generate an alert.

  What should you do?

  A. Modify the policy template.

  B. Assign the Global reader role to the file owners.

  C. Exclude file matching by using a regular expression.

  D. Update the governance action.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies#create-a-new-file-policy

• Question 129:

  You receive an email that contains a list of words that will be used for a sensitive information type.

  You need to create a file that can be used as the source of a keyword dictionary.

  In which format should you save the list?

  A. a JSON file that has an element for each word

  B. an ACCDB database file that contains a table named Dictionary

  C. an XML file that contains a keyword tag for each word

  D. a CSV file that contains words separated by commas

  Correct Answer: D

  Keyword dictionaries can be created either from a text file or from csv file.

  Note:

  There are several versions of this question in the exam. The question has two possible correct answers:

  a CSV file that contains words separated by commas a text file that has one word on each line

  Other incorrect answer options you may see on the exam include the following:

  1.

  a TSV file that contains words separated by tabs

  2.

  a DOCX file that has one word on each line

  3.

  an XML file that contains a keyword tag for each word

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-keyword-dictionary?view=o365-worldwide

• Question 130:

  You have a Microsoft 365 tenant.

  You have a Microsoft SharePoint Online site that contains employment contracts in a folder named EmploymentContracts. All the files in EmploymentContracts are marked as records.

  You need to recommend a process to ensure that when a record is updated, the previous version of the record is kept as a version of the updated record.

  What should you recommend?

  A. Upload an updated file plan that contains the record definition.

  B. Unlock the record, modify the record, and then lock the record.

  C. Create a copy of the record and enter a version in the file metadata.

  D. Create a new label policy associated to an event that will apply to the record.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/record-versioning?view=o365-worldwide