Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 51:

  Your company has a Microsoft 365 tenant.

  The company performs annual employee assessments. The assessment results are recorded in a document named AssessmentTemplate.docx that is created by using a Microsoft Word template. Copies of the employee assessments are sent to employees and their managers. The assessment copies are stored in mailboxes, Microsoft SharePoint Online sites, and OneDrive for Business folders. A copy of each assessment is also stored in a SharePoint Online folder named Assessments.

  You need to create a data loss prevention (DLP) policy that prevents the employee assessments from being emailed to external users. You will use a document fingerprint to identify the assessment documents. The solution must minimize effort.

  What should you include in the solution?

  A. Create a fingerprint of 100 sample documents in the Assessments folder.

  B. Create a sensitive info type that uses Exact Data Match (EDM).

  C. Import 100 sample documents from the Assessments folder to a seed folder.

  D. Create a fingerprint of AssessmentTemplate.docx.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/document-fingerprinting?view=o365-worldwide

• Question 52:

  You have a data loss prevention (DLP) policy configured for endpoints as shown in the following exhibit.

  

  From a computer named Computer1, a user can sometimes upload files to cloud services and sometimes cannot. Other users experience the same issue. What are two possible causes of the issue? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. The computers are NOT onboarded to the Microsoft 365 compliance center.

  B. The Copy to clipboard action is set to Audit only.

  C. There are file path exclusions in the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings.

  D. The Access by unallowed apps action is set to Audit only.

  E. The unallowed browsers in the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings are NOT configured.

  Correct Answer: CE

• Question 53:

  You have a Microsoft 365 tenant that uses 100 data loss prevention (DLP) policies.

  A Microsoft Exchange administrator frequently investigates emails that were blocked due to DLP policy violations.

  You need recommend which DLP report the Exchange administrator can use to identify how many messages were blocked based on each DLP policy.

  Which report should you recommend?

  A. Third-party DLP policy matches

  B. DLP policy matches

  C. DLP incidents

  D. False positive and override

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide

• Question 54:

  Your company has a Microsoft 365 tenant that uses a domain named contoso.com.

  The company uses Microsoft Office 365 Message Encryption (OME) to encrypt email sent to users in fabrikam.com.

  A user named User1 erroneously sends an email to [email protected].

  You need to prevent [email protected] from accessing the email.

  What should you do?

  A. Run the Get-MessageTracecmdlet.

  B. Run the Set-OMEMessageRevocationcmdlet.

  C. Instruct User1 to delete the email from her Sent Items folder from Microsoft Outlook.

  D. Run the New-ComplianceSearchActioncmdlet.

  E. Instruct User1 to select Remove external access from Microsoft Outlook on the web.

  Correct Answer: B

• Question 55:

  You have a Microsoft 365 tenant.

  You discover that email does NOT use Microsoft Office 365 Message Encryption (OME).

  You need to ensure that OME can be applied to email.

  What should you do first?

  A. Enable Microsoft Defender for Office 365.

  B. Activate Azure Information Protection.

  C. Activate Azure Rights Management (Azure RMS).

  D. Create an Azure key vault.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message-encryption-capabilities?view=o365-worldwide

• Question 56:

  You have a Microsoft 365 tenant. You create the following:

  1.

  A sensitivity label

  2.

  An auto-labeling policy

  You need to ensure that the sensitivity label is applied to all the data discovered by the auto-labeling policy.

  What should you do first?

  A. Enable insider risk management.

  B. Create a trainable classifier.

  C. Run the Enable-TransportRulecmdlet.

  D. Run the policy in simulation mode.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

• Question 57:

  You have a sensitive information type based on a trainable classifier.

  You are unsatisfied with the result of the result of trainable classifier.

  You need to retrain the classifier.

  What should you use in the Microsoft 365 compliance center?

  A. Labels from Information protection

  B. Labels from Information governance

  C. Content explorer from Data classification

  D. Content search

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-how-to-retrain-content-explorer?view=o365-worldwide

• Question 58:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).

  You have computers that run Windows 10 and have Microsoft 365 Apps installed. The computers are joined to Azure Active Directory (Azure AD).

  You need to ensure that Endpoint DLP policies can protect content on the computers.

  Solution: You onboard the computers to Microsoft Defender for Endpoint.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started?view=o365-worldwide

• Question 59:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are configuring a file policy in Microsoft Cloud App Security.

  You need to configure the policy to apply to all files. Alerts must be sent to every file owner who is affected by the policy. The policy must scan for credit card numbers, and alerts must be sent to the Microsoft Teams site of the affected

  department.

  Solution: You use the Built-in DLP inspection method and send alerts as email.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Alerts must be sent to the Microsoft Teams site of the affected department. A Microsoft Power Automate playbook should be used.

  Reference: https://docs.microsoft.com/en-us/cloud-app-security/content-inspection-built-in https://docs.microsoft.com/en-us/cloud-app-security/flow-integration

• Question 60:

  You have a Microsoft 365 tenant that uses Microsoft Office 365 Message Encryption (OME).

  You need to ensure that any emails containing attachments and sent to [email protected] are encrypted automatically by using OME.

  What should you do?

  A. From the Exchange admin center, create a new sharing policy.

  B. From the Microsoft 365 security center, create a Safe Attachments policy.

  C. From the Exchange admin center, create a mail flow rule.

  D. From the Microsoft 365 compliance center, configure an auto-apply retention label policy.

  Correct Answer: C

  You can create mail flow rules to help protect email messages you send and receive. You can set up rules to encrypt any outgoing email messages and remove encryption from encrypted messages coming from inside your organization or from replies to encrypted messages sent from your organization.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?view=o365-worldwide