Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 221:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You have a user named User1. Several users have full access to the mailbox of User1.

  Some email messages sent to User1 appear to have been read and deleted before the user viewed them.

  When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.

  You need to ensure that you can view future sign-ins to the mailbox of User1.

  Solution: You run the Set-AdminAuditlogConfig -AdminAuditLogEnabled $true -AdminAuditLogCmdlets *Mailbox* command.

  Does that meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 222:

  You have a Microsoft 365 E3 subscription.

  You plan to audit all Microsoft Exchange Online user and admin activities.

  You need to ensure that all the Exchange audit log records are retained for one year.

  What should you do?

  A. Modify the record type of the default audit retention policy.

  B. Modify the retention period of the default audit retention policy.

  C. Create a custom audit retention policy.

  D. Assign Microsoft 365 Enterprise E5 licenses to all users.

  Correct Answer: D

• Question 223:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You have a user named User1. Several users have full access to the mailbox of User1.

  Some email messages sent to User1 appear to have been read and deleted before the user viewed them.

  When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.

  You need to ensure that you can view future sign-ins to the mailbox of User1.

  Solution: You run the Set-MailboxFolderPermission -Identity "User1" -User [email protected] -AccessRights Owner command.

  Does that meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 224:

  You have a Microsoft 365 subscription.

  You need to be notified by email whenever an administrator starts an eDiscovery search.

  What should you do from the Microsoft Purview compliance portal?

  A. From Records management create event type.

  B. From eDiscovery, create an eDiscovery case.

  C. From Content search, create a new search.

  D. From Policies, create an alert policy.

  Correct Answer: D

• Question 225:

  You have a Microsoft 365 subscription that contains a user named User1.

  You need to assign User1 permissions to search Microsoft Office 365 audit logs.

  What should you use?

  A. the Azure Active Directory admin center

  B. the Microsoft Purview compliance portal

  C. the Exchange admin center

  D. the Microsoft 365 Defender portal

  Correct Answer: C

• Question 226:

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  You need to ensure that all email messages that contain attachments are encrypted automatically by using Microsoft Purview Message Encryption.

  What should you create?

  A. a sensitivity label

  B. an information barrier segment

  C. a data loss prevention (DLP) policy

  D. a mail flow rule

  Correct Answer: D

• Question 227:

  You have a Microsoft 365 E5 subscription.

  You need to export the details of a retention label. The export must include the following information:

  ? Is record

  ? Is regulatory ? Disposition type What should you do?

  A. From the Microsoft Purview compliance portal, export Compliance Manager assessment actions.

  B. From the Microsoft Purview compliance portal export a file plan.

  C. From the Microsoft Purview compliance portal, export a disposition review.

  D. From PowerShell, run the Export-ActivityExplorerData cmdlet.

  E. From PowerShell, run the Get-RetentionEvent cmdlet.

  Correct Answer: B

• Question 228:

  You have a Microsoft 365 E5 subscription that uses Microsoft Teams and contains a user named User1.

  You configure Microsoft Purview Information Barriers.

  You need to identify which information barrier policies apply to User1.

  Which cmdlet should you use?

  A. Get-OrganizationSegment

  B. Get-InformationBarrierRecipientStatus

  C. Get-InformationBarrierPolicy

  D. Get-InformationBarrierPoliciesApplicationStatus

  Correct Answer: B

  https://learn.microsoft.com/en-us/powershell/module/exchange/get-informationbarrierrecipientstatus?view=exchange-ps

• Question 229:

  You have a Microsoft 365 E5 subscription that contains two Microsoft SharePoint Online sites named Site1 and Site2.

  You plan to configure a retention label named Label1 and apply Label1 to all the files in Site1.

  You need to ensure that two years after a file is created in Site1, the file moves automatically to Site2.

  How should you configure the Choose what happens after the retention period setting for Label1?

  A. Run a Power Automate flow

  B. Change the label

  C. Deactivate retention settings

  D. Start a disposition review

  Correct Answer: A

• Question 230:

  You have a Microsoft 365 E5 subscription that uses Microsoft Purview. The subscription contains two groups named Group1 and Group2. You need to implement a policy to detect messages that present a conflict of interest between the users in Group1 and the users in Group2. What should you use in the Microsoft Purview compliance portal?

  A. Insider risk management

  B. Privacy risk management

  C. Information barriers

  D. Communication compliance

  Correct Answer: D

  Microsoft Purview Communication Compliance is an insider risk solution that helps minimize communication risks by helping you detect, capture, and act on potentially inappropriate messages in your organization. https://learn.microsoft.com/en-us/purview/communication-compliance