Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 31:

  You have a Microsoft 365 tenant that uses the following sensitivity labels:

  1.

  Confidential

  2.

  Internal

  3.

  External

  The labels are published by using a label policy named Policy1.

  Users report that Microsoft Office for the web apps do not display the Sensitivity button. The Sensitivity button appears in Microsoft 365 Apps that are installed locally.

  You need to ensure that the users can apply sensitivity labels to content when they use Office for the web apps.

  What should you do?

  A. Modify the scope of the confidential label.

  B. Modify the publishing settings of Policy1.

  C. Enable sensitivity label support for Office files in Microsoft SharePoint Online and OneDrive.

  D. Run the Execute-AzureAdiabelSync cmdlet.

  Correct Answer: C

• Question 32:

  You have a Microsoft 365 E5 tenant.

  You need to add a new keyword dictionary.

  What should you create?

  A. a trainable classifier

  B. a sensitivity label E3

  C. a sensitive info type

  D. a retention policy

  Correct Answer: C

• Question 33:

  You have a Microsoft 365 tenant that uses Microsoft Exchange Online.

  You need to recover deleted email messages from a user's mailbox.

  Which two PowerShell cmdlets should you use? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Restore-RecoverableItems

  B. Get-MailboxRestoreRequest

  C. Restore-Mailbox

  D. Get-RecoverableItems

  E. Set-MailboxRestoreRequest

  Correct Answer: AD

  Reference: https://docs.microsoft.com/en-us/exchange/recipients-in-exchange-online/manage-user-mailboxes/recover-deleted-messages

• Question 34:

  You have a Microsoft 365 E5 tenant that contains a user named User1.

  You need to identify the type and number of holds placed on the mailbox of User1.

  What should you do first?

  A. From the Microsoft 365 compliance center, create an eDiscovery case.

  B. From Exchange Online PowerShell, run the Get-Mailboxcmdlet.

  C. From the Microsoft 365 compliance center, run a content search.

  D. From Exchange Online PowerShell, run the Get-HoldCompliancePolicycmdlet.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/identify-a-hold-on-an-exchange-online-mailbox?view=o365-worldwide

• Question 35:

  A compliance administrator recently created several data loss prevention (DLP) policies.

  After the policies are created, you receive a higher than expected volume of DLP alerts.

  You need to identify which rules are generating the alerts.

  Which DLP report should you use?

  A. Third-party DLP policy matches

  B. DLP policy matches

  C. DLP incidents

  D. False positive and override

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide

• Question 36:

  You have a Microsoft 365 E5 tenant that contains the policies shown in the following table.

  

  A file named File1 has all the policies applied. How long will File1 be retained?

  A. File1 will be deleted automatically after seven years.

  B. File1 will be deleted automatically after five years.

  C. File1 will be retained until the file is deleted manually.

  D. File1 will be deleted automatically after 10 years.

  Correct Answer: D

  Retention always takes precedence over permanent deletion, with the longest retention period taking preference. The delete action from a retention label always takes precedence over the delete action from a retention policy. Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide#the-principles-of-retention-or-what-takes-precedence

• Question 37:

  You have a Microsoft 365 tenant that uses Microsoft Teams.

  You need to ensure that all internal communication is stored for a minimum of seven years.

  What should you create first?

  A. a retention label

  B. a Microsoft SharePoint Online site

  C. a Microsoft Exchange Online shared mailbox

  D. a retention label policy

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide

• Question 38:

  You need to protect documents that contain credit card numbers from being opened by users outside your company. The solution must ensure that users at your company can open the documents. What should you use?

  A. a sensitivity label policy

  B. a sensitivity label

  C. a retention policy

  D. a data loss prevention (DLP) policy

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide

• Question 39:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 tenant and 500 computers that run Windows 10. The computers are onboarded to the Microsoft 365 compliance center.

  You discover that a third-party application named Tailspin_scanner.exe accessed protected sensitive information on multiple computers. Tailspin_scanner.exe is installed locally on the computers.

  You need to block Tailspin_scanner.exe from accessing sensitive documents without preventing the application from accessing other documents.

  Solution: From the Cloud App Security portal, you create an app discovery policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You can create app discovery policies to alert you when new apps are detected within your organization. Use the unallowed apps list instead.

  Reference: https://docs.microsoft.com/en-us/cloud-app-security/cloud-discovery-policies https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-using?view=o365-worldwide

• Question 40:

  You have a Microsoft 365 tenant that contains a Microsoft SharePoint Online site named Site1. You have the users shown in the following table.

  

  You create a data loss prevention (DLP) policy for Site1 that detects credit card number information. You configure the policy to use the following protection action:

  When content matches the policy conditions, show policy tips to users and send them an email notification.

  You use the default notification settings.

  To Site1, User1 uploads a file that contains a credit card number.

  Which users receive an email notification?

  A. Used and User2 only

  B. Used and User4 only

  C. Used, User2, User3, and User4

  D. Used only

  E. Used and User3 only

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-the-default-dlp-policy?view=o365-worldwide