Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 11:

  You have a Microsoft 365 E5 subscription.

  You need to prevent users from uploading data loss prevention (DLP)-protected documents to the following third-party websites:

  1.

  web1.contoso.com

  2.

  web2.contoso.com

  The solution must minimize administrative effort.

  To what should you set the Service domains setting for Endpoint DLP?

  A. contoso.com

  B. web*.contoso.com

  C. *.contoso.com

  D. web1.contoso.com and web2.contoso.com

  Correct Answer: D

• Question 12:

  You have a Microsoft 365 E5 subscription that contains multiple data loss prevention (DLP) policies.

  You need to identify which DLP rules include conditions that can trigger the DLP policies.

  Which report should you use from the Microsoft Purview compliance portal?

  A. DLP policy matches

  B. False positives and overrides

  C. DLP incidents

  D. Third-party DLP policy matches

  Correct Answer: A

• Question 13:

  You have a Microsoft 365 E5 tenant that contains a Microsoft SharePoint Online site named Site1 and a user named User1. The tenant has auditing enabled.

  You need to ensure that User1 can perform disposition reviews. The solution must use the principle of the least privilege.

  What should you do?

  A. Assign User1 the Compliance Data Administrator role.

  B. Add User1 to the Records Management role group.

  C. Assign User1 the Data Investigator role.

  D. Add User1 to the Content Explorer Content Viewer role group.

  Correct Answer: B

  Permissions for disposition

  To successfully access the Disposition tab in the Microsoft Purview compliance portal, users must have the Disposition Management role. From December 2020, this role is now included in the Records Management default role group.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/disposition

• Question 14:

  You have a Microsoft 365 E5 subscription that contains a trainable classifier named Trainable1. You plan to create the items shown in the following table.

  

  Which items can use Trainable1?

  A. Label2 only

  B. Label1 and Label2 only

  C. Label1 and Policy1 only

  D. Label2, Policy1, and DLP1 only

  Correct Answer: C

  A Microsoft Purview trainable classifier is a tool you can train to recognize various types of content by giving it samples to look at. Once trained, you can use it to identify item for application of Office sensitivity labels, Communications compliance policies, and retention label policies.

  Once published your classifier will be available as a condition in Office auto-labeling with sensitivity labels, auto-apply retention label policy based on a condition and in Communication compliance.

  Reference: https://learn.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with

• Question 15:

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. Site1 contains a file named File1.

  You have a retention policy named Retention1 that has the following settings:

  Retention items for a specific period

  -Retention period: 5 years

  -

  At the end of the retention period: Delete items automatically Retention1 is applied to Site1. You need to ensure that File1 is deleted automatically after seven years. The solution must NOT affect the retention of other files on Site1. What should you do first?

  A.

  Move File1 to a new folder and configure the access control list (ACL) entries for File1.

  B.

  Create a new retention policy.

  C.

  Create and publish a new retention label.

  D.

  Move File1 to a new folder and list the excluded locations for Retention1.

  Correct Answer: C

  If some items for Exchange, SharePoint, OneDrive, or Microsoft 365 Groups need different retention settings from the retention policy settings you've configured, create retention labels for these exceptions.

  As part of your data governance strategy to retain what you need and delete what you don't, you might need to create a few retention labels for items that need exceptions to your retention policies.

  Whereas retention policies automatically apply to all items at the container level (such as SharePoint sites, user mailboxes, and so on), retention labels apply to individual items, such as a SharePoint document or an email message.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/create-retention-policies https://learn.microsoft.com/en-us/microsoft-365/compliance/create-retention-labels-data-lifecycle-management

• Question 16:

  You have a Microsoft 365 E5 tenant that contains a Microsoft SharePoint Online document library named Library1.

  You need to declare a collection of files that are stored in Library1 as regulatory records.

  What should you use?

  A. a sensitivity label policy

  B. a retention label policy

  C. a retention policy

  D. data loss prevention (DLP) policy

  Correct Answer: B

  The ability to mark a document as a record and restrict actions that can be performed on the record is an essential goal for any records management solution.

  To use record versioning, you first label the document with a retention label that's configured to mark items as a record. At this point, a document property, called Record status is displayed next to the retention label. Depending on whether the label is configured to unlock the record by default (currently rolling out), the initial record status is either Locked or Unlocked.

  Reference: https://learn.microsoft.com/en-us/microsoft-365/compliance/record-versioning

• Question 17:

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

  You need to implement a records management solution for the files stored on Site1. The solution must meet the following requirements:

  The files must be retained for seven years.

  Files older than seven years must be deleted automatically.

  What should you use to manage the files?

  A. a label policy

  B. an adaptive scope

  C. a file plan

  D. a disposition review

  Correct Answer: C

  Create a file plan to manage records in SharePoint Server.

  The file plan is the primary records management planning document in SharePoint Server. Although file plans can differ across organizations, they typically:

  Describe the kinds of items the organization acknowledges to be records.

  Describe what broader category of records the items belong to.

  Indicate where records are stored.

  Describe retention periods for records.

  Delineate who is responsible for managing the various kinds of records.

  Reference: https://learn.microsoft.com/en-us/sharepoint/governance/create-a-file-plan-to-manage-records

• Question 18:

  You have a Microsoft 365 E5 subscription.

  You need to create static retention policies for the following locations:

  Teams chats Exchange email SharePoint sites Microsoft 365 Groups Teams channel messages

  What is the minimum number of retention policies required?

  A. 1

  B. 2

  C. 3

  D. 4

  E. 5

  Correct Answer: B

  1 for Exchange mail, Sharepoint Sites and Microsoft 365 Groups. And 1 for teams chats and teams channel messages.

• Question 19:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You create the retention label shown in the following exhibit.

  

  Which users can perform a disposition review of content that has Retention1 applied?

  A. Admin2 only

  B. Admin3 only

  C. Admin1 and Admin2 only

  D. Admin1 and Admin3 only

  E. Admin2 and Admin3 only

  F. Admin1, Admin2, and Admin3

  Correct Answer: E

  Permissions for disposition

  *

  Admin3: To successfully access the Disposition tab in the Microsoft Purview compliance portal, users must have the Disposition Management role. From December 2020, this role is now included in the Records Management default role

  group.

  Note:

  By default, a global admin isn't granted the Disposition Management role.

  *

  Admin2

  Compliance Administrator - Members can manage settings for device management, data loss prevention, reports, and preservation.

  The RecordManagement role is included in default roles assigned to the Compliance Administrator role. Incorrect:

  *

  Not Admin1

  The disposition reviewers explicitly need the Disposition Management role. This is included in the Records Management rule group – but a Global Administrator for the tenant will not have this role by default!

  Reference: https://learn.microsoft.com/en-us/microsoft-365/compliance/disposition

  https://alberthoitingh.com/2021/05/20/multi-stage-disposition-microsoft-365/

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center

• Question 20:

  You have a Microsoft 365 E5 tenant that uses Microsoft Teams and contains two users named User1 and User2.

  You create a data loss prevention (DLP) policy that is applied to the Teams chat and channel messages location for User1 and User2.

  Which Teams entities will have DLP protection?

  A. 1:1/n chats and private channels only

  B. 1:1/n chats and general channels only

  C. 1:1/n chats, general channels, and private channels

  Correct Answer: A

  Reference: https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-microsoft-teams