Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 211:

  HOTSPOT

  You have a Microsoft 365 E5 tenant.

  Data loss prevention (DLP) policies are applied to Exchange email, SharePoint sites, and OneDrive accounts locations.

  You need to use PowerShell to retrieve a summary of the DLP rule matches from the last seven days.

  Which PowerShell module and cmdlet should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/get-dlpdetectionsreport?view=exchange-ps

• Question 212:

  HOTSPOT

  You create a data loss prevention (DLP) policy that meets the following requirements:

  1.

  Prevents guest users from accessing a sensitive document shared during a Microsoft Teams chat

  2.

  Prevents guest users from accessing a sensitive document stored in a Microsoft Teams channel

  Which location should you select for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-microsoft-teams?view=o365-worldwide

  https://docs.microsoft.com/en-us/microsoftteams/sharepoint-onedrive-interact

• Question 213:

  HOTSPOT

  You have a Microsoft 365 E5 tenant.

  You create sensitivity labels as shown in the Sensitivity Labels exhibit.

  

  The Confidential/External sensitivity label is configured to encrypt files and emails when applied to content. The sensitivity labels are published as shown in the Published exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 214:

  HOTSPOT

  You need to implement an information compliance policy to meet the following requirements:

  Documents that contain passport numbers from the United States, Germany, Australia, and Japan must be identified automatically.

  When a user attempts to send an email or an attachment that contains a passport number, the user must receive a tooltip in Microsoft Outlook.

  Users must be blocked from using Microsoft SharePoint Online or OneDrive for Business to share a document that contains a passport number.

  What is the minimum number of sensitivity labels and auto-labeling policies you should create? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 215:

  HOTSPOT

  You have a Microsoft SharePoint Online site named Site1 and a sensitivity label named Sensitivity1. Sensitivity1 adds a watermark and a header to content.

  You create a policy to automatically apply Sensitivity1 to emails in Microsoft Exchange Online and Site1.

  How will Sensitivity1 mark matching emails and Site1 documents? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

• Question 216:

  HOTSPOT

  You use project codes that have a format of three alphabetical characters that represent the project type, followed by three digits, for example Abc123.

  You need to create a new sensitive info type for the project codes.

  How should you configure the regular expression to detect the content? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://joannecklein.com/2018/08/07/build-and-use-custom-sensitive-information-types-in-office-365/

• Question 217:

  HOTSPOT

  You have a Microsoft 365 tenant named contoso.com that contains two users named User1 and User2. The tenant uses Microsoft Office 365 Message Encryption (OME).

  User1 plans to send emails that contain attachments as shown in the following table.

  

  User2 plans to send emails that contain attachments as shown in the following table.

  

  For which emails will the attachments be protected? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 218:

  You have a Microsoft 365 E5 subscription.

  You create a role group named Role1.

  You need to add a role to Role1 that will enable group members to view the metadata of records that were tagged for deletion automatically at the end of the records’ retention period. The solution must use the principle of least privilege.

  Which role should you add?

  A. Review

  B. View-Only Retention Management

  C. Retention Management

  D. Disposition Management

  E. Record Management

  Correct Answer: B

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions?view=o365-worldwide

• Question 219:

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

  You need to implement Microsoft Purview data lifecycle management.

  What should you create first?

  A. a sensitivity label policy

  B. a retention label

  C. a data loss prevention (DLP) policy

  D. an auto-labeling policy

  Correct Answer: B

• Question 220:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You have a user named User1. Several users have full access to the mailbox of User1.

  Some email messages sent to User1 appear to have been read and deleted before the user viewed them.

  When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.

  You need to ensure that you can view future sign-ins to the mailbox of User1.

  Solution: You run the Set-AuditConfig -Workload Exchange command.

  Does that meet the goal?

  A. Yes

  B. No

  Correct Answer: A