Microsoft Microsoft Certifications SC-400 Questions & Answers

• Question 81:

  At the end of a project, you upload project documents to a Microsoft SharePoint Online library that contains many files. The following is a sample of the project document file names:

  1.

  aei_AA989.docx

  2.

  bci_WS098.docx

  3.

  cei_DF112.docx

  4.

  ebc_QQ454.docx

  5.

  ecc_BB565.docx

  All documents that use this naming format must be labeled as Project Documents:

  You need to create an auto-apply retention label policy.

  What should you use to identify the files?

  A. A sensitive info type

  B. A retention label

  C. A trainable classifier

  Correct Answer: A

• Question 82:

  You need to provide a user with the ability to view data loss prevention (DLP) alerts in the Microsoft 365 compliance center. The solution must use the principle of least privilege. Which role should you assign to the user?

  A. Compliance data administrator

  B. Security operator

  C. Compliance administrator

  D. Security reader

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-configure-view-alerts-policies?view=o365- worldwide

• Question 83:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You recently discovered that the developers at your company emailed Azure Storage keys in plain text to third parties.

  You need to ensure that when Azure Storage keys are emailed, the emails are encrypted.

  Solution: You configure a mail flow rule that matches a sensitive info type.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 84:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You recently discovered that the developers at your company emailed Azure Storage keys in plain text to third parties.

  You need to ensure that when Azure Storage keys are emailed, the emails are encrypted.

  Solution: You create a data loss prevention (DLP) policy that has all locations selected.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 85:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You recently discovered that the developers at your company emailed Azure Storage keys in plain text to third parties.

  You need to ensure that when Azure Storage keys are emailed, the emails are encrypted.

  Solution: You create a data loss prevention (DLP) policy that has only the Exchange email location selected.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 86:

  You are creating an advanced data loss prevention (DLP) rule in a DLP policy named Policy 1 that will have all locations selected.

  Which two conditions can you use in the rule? Each correct answer presents a complete solution. (Choose two.)

  NOTE: Each correct selection is worth one point.

  A. Content contains

  B. Content is shared from Microsoft 365

  C. Document size equals or is greater than

  D. Attachment's file extension is

  E. Document property is

  Correct Answer: AB

• Question 87:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).

  You have computers that run Windows 10 and have Microsoft 365 Apps installed. The computers are joined to Azure Active Directory (Azure AD).

  You need to ensure that Endpoint DLP policies can protect content on the computers.

  Solution: You deploy the Endpoint DLP configuration package to the computers.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started?view=o365- worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-endpoints? view=o365-worldwide

• Question 88:

  You create a data loss prevention (DLP) policy. The Advanced DLP rules page is shown in the Rules exhibit.

  

  The Review your settings page is shown in the Review exhibit.

  

  You need to review the potential impact of enabling the policy without applying the actions. What should you do?

  A. Edit the policy, remove all the actions in DLP rule 1, and select I'd like to test it out first.

  B. Edit the policy, remove the Restrict access to the content and Send incident report to Administrator actions, and then select Yes, turn it on right away.

  C. Edit the policy, remove all the actions in DLP rule 1, and select Yes, turn it on right away.

  D. Edit the policy, and then select I'd like to test it out first.

  Correct Answer: D

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-dlp-policy-from-a-template? view=o365-worldwide

• Question 89:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You need to delegate the following tasks:

  1.

  Create and manage data loss prevention (DLP) policies.

  2.

  Review classified content by using Content explorer.

  The solution must use the principle of least privilege.

  Which user should perform each task? To answer, drag the appropriate users to the correct tasks. Each user may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: User1

  Create and manage data loss prevention (DLP) policies.

  Information Protection Admins

  Create, edit, and delete DLP policies, sensitivity labels and their policies, and all classifier types. Manage endpoint DLP settings and simulation mode for auto-labeling policies.

  Note:

  User 1 is Information Protection Administrator.

  User2 is Information Protection Analyst.

  User3 is Information Protection Investigator.

  Box 2: User3

  Review classified content by using Content explorer.

  Information Protection Investigator

  Access and manage DLP alerts, activity explorer, and content explorer. View-only access to DLP policies, sensitivity labels and their policies, and all classifier types.

  Incorrect:

  * Information Protection Analyst

  Access and manage DLP alerts and activity explorer. View-only access to DLP policies, sensitivity labels and their policies, and all classifier types.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions

• Question 90:

  HOTSPOT

  You plan to provide a user named User1 with the ability to view data loss prevention (DLP) reports.

  You need to identify the following:

  1.

  Which role you should assign to User1

  2.

  Which tool you should use to assign the role

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Security Reader

  Role:

  Manage permissions for data loss prevention reports

  To view DLP reports in the Microsoft Purview compliance portal, you must be assigned to the:

  *-> Security Reader role in the Exchange admin center. By default, this role is assigned to the Organization Management and Security Reader role groups in the Exchange admin center.

  *

  View-Only DLP Compliance Management role in the Purview compliance portal. By default, this role is assigned to the Compliance Administrator, Organization Management, Security Administrator, and Security Reader role groups in the Purview compliance portal.

  *

  View-Only Recipients role in the Exchange admin center. By default, this role is assigned to the Compliance Management, Organization Management, and View-Only Organization Management role groups in the Exchange admin center. Incorrect:

  *

  Data Investigator

  Perform searches on mailboxes, SharePoint Online sites, and OneDrive for Business locations.

  Box 2: Exchange admin center

  Reference: https://learn.microsoft.com/en-us/training/modules/manage-data-loss-prevention-polices/6-manage-permissions-for-data-loss-prevention-reports