Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 281:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You plan to create a new sensitive information type (SIT) by using the Microsoft Purview compliance portal.

  You need to copy and modify an existing SIT from which to create the new SIT.

  What are two SITs that you can copy and modify? To answer, select the appropriate SITs in the answer area.

  NOTE: Each selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: All Full Names

  All full names is a bundled named entity. It detects full names for people from all supported countries/regions, which include Australia, China, Japan, U.S., and countries in the EU. Use this SIT to detect all possible matches of full names.

  Note: Create custom sensitive information types in the compliance portal

  If the pre-configured sensitive information types (SIT) don't meet your needs, you can create and define customized SITs that meet your needs. You can also copy and then edit a built-in SIT.

  Categories of sensitive information types

  Built in sensitive information types

  These SITs are created by Microsoft and show up in the compliance console by default. These SITs can't be edited, but you can use them as templates by copying them to create custom sensitive information types.

  Box 2: All Credential Types

  "All credentials" is a bundled-entity sensitive information type (SIT). It detects credentials from all supported services and environments, which include Amazon, Azure, GitHub, Google, Microsoft general, Slack and more.

  Description

  The All credentials SIT is a bundled SIT that scans for individual credential types. This includes checksum evaluated values and keyword/pattern combinations. The All credential entity scans for any of the underlying credential information

  type checksums and/or patterns are detected in a document.

  Incorrect:

  *

  Adatum numbers

  Only the built in sensitive information types, by Microsoft, can be copied.

  *

  Adatum document patterns

  Only the built in sensitive information types, by Microsoft, can be copied.

  *

  ABA Routing Number

  Format

  nine digits that may be in a formatted or unformatted pattern

  Pattern two digits in the ranges 00-12, 21-32, 61-72, or 80 two digits an optional hyphen four digits an optional hyphen a digit

  *

  ASP.NET machine Key Format Symmetric keys in XML configuration.

  Pattern

  Various symmetric key formats in XML, for example:

  Credential example

  Note

  These SITs can't be copied:

  Canada driver's license number

  EU driver's license number

  EU national identification number

  EU passport number

  EU social security number or equivalent identification

  EU tax identification number

  International classification of diseases (ICD-10-CM)

  International classification of diseases (ICD-9-CM)

  U.S. driver's license number

  Reference: https://learn.microsoft.com/en-us/purview/sit-create-a-custom-sensitive-information-type https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-learn-about https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-entity-definitions

• Question 282:

  HOTSPOT

  You have a Microsoft 365 sensitivity label that is published to all the users in your Microsoft Entra tenant as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-office-apps?view=o365-worldwide#when-office-apps-apply-content-marking-and-encryption

• Question 283:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You need to implement a compliance solution that meets the following requirements:

  1.

  Captures clips of key security-related user activities, such as the exfiltration of sensitive company data.

  2.

  Integrates data loss prevention (DLP) capabilities with insider risk management.

  What should you use for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 284:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the administrators shown in the following table.

  

  On August 1, 2023, you apply the communication compliance policies shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

• Question 285:

  HOTSPOT

  You have a Microsoft 365 E5 tenant that contains the objects shown in the following table.

  

  You need to restore a Microsoft Word document that was deleted from the Sales channel by User1.

  From where can the document be restored, and how long will the document be retained? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 286:

  HOTSPOT

  You have a Microsoft 365 subscription that contains a sensitivity label named Contoso Confidential.

  You publish Contoso Confidential to all users.

  Contoso Confidential is configured as shown in the Configuration exhibit. (Click the Configuration tab.)

  

  The Encryption settings of Contoso Confidential are configured as shown in the Encryption exhibit. (Click the Encryption tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 287:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

  

  The subscription contains the users shown in the following table.

  

  You create the mail flow rules shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 288:

  HOTSPOT

  You need to implement a solution to encrypt email. The solution must meet the compliance requirements.

  What should you create in the Exchange admin center and the Microsoft 36.S compliance center?

  To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Users must be able to manually select that email messages are sent encrypted. The encryption will use Office 365 Message Encryption (OME) v2. Any email containing an attachment that has the Fabrikam Confidential sensitivity label applied must be encrypted automatically by using OME.

• Question 289:

  HOTSPOT

  You need to recommend an information governance solution that meets the HR requirements for handling employment applications and resumes.

  What is the minimum number of information governance solution components that you should create? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-retention-labels-automatically?view=o365-worldwide

• Question 290:

  HOTSPOT

  How many files in Site2 will be visible to User1 and User2 after you turn on DLPpolicy1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://social.technet.microsoft.com/wiki/contents/articles/36527.implement-data-loss-prevention-dlp-in-sharepoint-online.aspx