Pass SC-401 Brain Dump Updated Certification Sample Questions [Q16-Q40]

Rate this post

Pass SC-401 Brain Dump Updated Certification Sample Questions

Online SC-401 Test Brain Dump Question and Test Engine

Microsoft SC-401 Exam Syllabus Topics:

Section	Weight	Objectives
Implement information protection	30–35%	– Implement sensitivity labels and policies 1. Configure protection and marking settings 2. Manage publishing and auto-labeling policies 3. Apply labels to containers and workloads – Implement and manage data classification 1. Create and manage sensitive information types 2. Identify sensitive information requirements 3. Implement document fingerprinting and exact data match 4. Create and manage trainable classifiers – Protect data for AI services 1. Manage Data Security Posture Management (DSPM) for AI 2. Implement controls in Microsoft Purview 3. Implement controls in Microsoft 365 workloads
Implement data loss prevention and retention	30–35%	– Manage retention and governance 1. Configure records management 2. Plan and implement retention policies 3. Manage retention labels and dispositions – Design and implement data loss prevention (DLP) 1. Configure roles and permissions for DLP 2. Configure Adaptive Protection and integration with Defender for Endpoint 3. Design policies based on organizational requirements 4. Create and manage DLP policies and rules
Manage risks, alerts, and activities	30–35%	– Respond to alerts and incidents 1. Respond to DLP and insider risk alerts 2. Perform compliance and security investigations 3. Respond to alerts in Defender XDR and Defender for Cloud Apps – Configure and manage insider risk management 1. Manage evidence, levels, alerts, and cases 2. Set up settings and policy indicators 3. Create and manage insider risk policies – Manage audit and investigation capabilities 1. Use Activity Explorer and Content Search 2. Configure Microsoft Purview Audit (Premium) 3. Investigate activities and configure retention policies

Section

Weight

Objectives

Implement information protection

30–35%

– Implement sensitivity labels and policies

1. Configure protection and marking settings
2. Manage publishing and auto-labeling policies
3. Apply labels to containers and workloads

– Implement and manage data classification

1. Create and manage sensitive information types
2. Identify sensitive information requirements
3. Implement document fingerprinting and exact data match
4. Create and manage trainable classifiers

– Protect data for AI services

1. Manage Data Security Posture Management (DSPM) for AI
2. Implement controls in Microsoft Purview
3. Implement controls in Microsoft 365 workloads

Implement data loss prevention and retention

30–35%

– Manage retention and governance

1. Configure records management
2. Plan and implement retention policies
3. Manage retention labels and dispositions

– Design and implement data loss prevention (DLP)

1. Configure roles and permissions for DLP
2. Configure Adaptive Protection and integration with Defender for Endpoint
3. Design policies based on organizational requirements
4. Create and manage DLP policies and rules

Manage risks, alerts, and activities

30–35%

– Respond to alerts and incidents

1. Respond to DLP and insider risk alerts
2. Perform compliance and security investigations
3. Respond to alerts in Defender XDR and Defender for Cloud Apps

– Configure and manage insider risk management

1. Manage evidence, levels, alerts, and cases
2. Set up settings and policy indicators
3. Create and manage insider risk policies

– Manage audit and investigation capabilities

1. Use Activity Explorer and Content Search
2. Configure Microsoft Purview Audit (Premium)
3. Investigate activities and configure retention policies

Q16. You have a Microsoft 365 subscription.
You create and run a content search from the Microsoft Purview portal.
You need to download the results of the content search.
What should you obtain first?

a certificate

a password

a pin

an export key

Q17. HOTSPOT
You plan to create a custom sensitive information type that will use Exact Data Match (EDM).
You need to identify what to upload to Microsoft 365, and which tool to use for the upload.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q18. Drag and Drop Question
You have a Microsoft 365 E5 subscription.
You need to create the Microsoft Purview insider risk management policies shown in the following table.

Which policy template should you use for each policy? To answer, drag the appropriate policy templates to the correct policies. Each template may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Q19. You have a Microsoft 365 E5 subscription.
You need to review a Microsoft 365 Copilot usage report.
From where should you review the report?

Information Protection in the Microsoft Purview portal

the Microsoft 365 admin center

DSPM for AI in the Microsoft Purview portal

the Microsoft Defender portal

Q20. You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.
Site1 contains the files shown in the following table.

In the Microsoft Purview portal, you create a content search named Conlent1 and configure the search conditions as shown in the following exhibit.

Which files will be returned by Content1?

File2.docx only

File3.docx only

File1.docx and File2.docx only

File1 .docx and File3.docx only

File1 .docx, File2.docx, and File3.docx

Q21. You have a Microsoft 36515 subscription tha1 contains a Microsoft SharePoint Online site named Site1 Site1 contains three tiles named File1. File2 and File3.
You create the data loss prevention (DIP) policies shown in the following table.

The DIP rule matches for each tile are shown in the following table.

How many DIP policy matches events will be added to Activity explorer, and how many policy matches will be added to the DLP incidents report? To answer, select the appropriate options m the answer area.

Q22. You have a Microsoft 365 E5 subscription.
You need to ensure that encrypted email messages sent to an external recipient can be revoked or will expire within seven days.
What should you configure first?

a sensitivity label

a custom branding template

a Conditional Access policy

a mail flow rule

Q23. You have a Microsoft 365 E5 subscription that contains three DOCX files named File1, File2, and File3.
You create the sensitivity labels shown in the following table.

You apply the labels to the files as shown in the following table.

You ask Microsoft 365 Copilot to summarize the files, and you receive the results shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Q24. You have a Microsoft 365 E5 subscription that contains a user named User1. You deploy Microsoft Purview Data Security Posture Management for AD (DSPM for AD). You need to ensure that User1 can verify the auditing status of the subscription. The solution must follow the principle of least privilege. To which role group should you add User1?

Security Reader

Insider Risk Management Investigators

Insider Risk Management Analysts

View-Only Organization Management for Microsoft Exchange Online

Q25. You have a Microsoft 365 subscription.
You plan to retain the following audit log record types and activities for the next three years:
– CopilotInteraction: All activities selected (1/1)
– Interacted with Copilot
– ComplianceDLPEndpoint: All activities selected (2/2)
– Matched DLP rule
– Removed DLP rule from document
– AzureActiveDirectory: 2 of 25 activities selected (2/25)
– Reset user password
– Changed user password
What is the minimum number of audit retention policies you should create to retain only the selected record types and activities?

Q26. You have a Microsoft 365 E5 subscription.
You create a sensitivity label named Label1 and publish Label1 to all users and groups.
You have the following files in a SharePoint site:
– File1.doc
– File2.docx
– File3.xlsx
– File4.txt
You need to identify which files can have Label1 applied.
Which files should you identify?

File2.docx only

File2.docx and File3.xlsx only

File1.doc, File2.docx, and File3.xlsx only

File1.doc, File2.doc, File3.xlsx, and File4.txt

Q27. You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

Which users will Microsoft Purview insider risk management flag as potential high-impact users?

User1 and User2 only

User2 and User3 only

User1, User2, and User3 only

User1, User2, User3, and User4

Q28. You have a Microsoft 365 E5 subscription.
You need to apply data loss prevention (DLP) policies to the following:
– Microsoft Exchange Online mailboxes
– Microsoft SharePoint Online sites
– Microsoft 365 Copilot
– Microsoft OneDrive accounts
– On-premises repositories
What is the minimum number of DLP policies required to achieve the goal?

Q29. You have a Microsoft 365 tenant that uses Microsoft Purview Message Encryption.
You need to ensure that any emails containing attachments and sent to [email protected] are encrypted automatically by using Microsoft Purview Message Encryption.
What should you do?

From the Exchange admin center, create a mail flow rule.

From the Exchange admin center, create a new sharing policy.

From the Microsoft Defender portal, create a Safe Attachments policy.

From the Microsoft Purview portal, configure an auto-apply retention label policy.

Q30. You have a Microsoft 365 subscription.
You identify the following data loss prevention (DLP) requirements:
* Send notifications to users if they attempt to send attachments that contain an EU Social Security Number (SSN) or Equivalent ID.
* Prevent any email messages that contain credit card numbers from being sent outside your organization.
* Block the external sharing of Microsoft OneDrive content that contains EU passport numbers.
* Send administrators email alerts if any rule matches occur.
What is the minimum number of DLP policies and rules you must create to meet the requirements? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q31. HOTSPOT
You have a Microsoft 365 E5 subscription that uses Microsoft Purview and just-in-time (JIT) protection. The subscription contains the users shown in the following table.

The subscription contains the devices shown in the following table.

The devices contain the files shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Q32. You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.
You need to deploy a Microsoft Purview insider risk management solution that will generate an alert when users share sensitive information on Site1 with external recipients.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct answer is worth one point.

Turn on analytics.

Turn on indicators.

Configure adaptive protection.

Create an insider risk policy.

Create a data loss prevention (DLP) policy.

Q33. You have a Microsoft 365 subscription.
You have a user named User1 Several users have full access to the mailbox of User1.
Some email messages sent to User 1 appeal to have been read and deleted before the user viewed them When you search the audit log in the Microsoft Purview portal to identify who signed in to the mailbox of User l. the results are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1.
Solution: You run the Set-AuditConfig -Workload Exchange command.
Does that meet the goal?

Yes

Q34. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).
You have computers that run Windows 11 and have Microsoft 365 Apps installed. The computers are joined to a Microsoft Entra tenant.
You need to ensure that Endpoint DLP policies can protect content on the computers.
Solution: You deploy the Microsoft Purview Information Protection client to the computers.
Does this meet the goal?

Yes

Q35. You have a Microsoft 365 E5 subscription.
Users access their mailbox by using the following apps.
* Outlook for Microsoft 365
* Outlook on the web
* Outlook Mobile fiOS. Android)
You create a data loss prevention (DLP) policy named DLP1 that has the following settings:
* Location; Exchange email
* Status: On
* User notifications: On
* Notify users with a policy tip: Enabled
Which apps display a policy tip when content is matched by using DIP1 ?

Outlook for Microsoft 365 only

Outlook on the web only

Outlook for Microsoft 365 and Outlook on the web only

Outlook for Microsoft 365 and Outlook Mobile (iOS. Android) only

Outlook for Microsoft 365. Outlook on the web, and Outlook Mobile (iOS. Android)

Q36. You are planning a data loss prevention (DLP) solution that will apply to Windows Client computers.
You need to ensure that when users attempt to copy a file that contains sensitive information to a USB storage device, the following requirements are met:
*If the users are members of a group named Group1, the users must be allowed to copy the file, and an event must be recorded in the audit log.
*All other users must be blocked from copying the file.
What should you create?

one DLP policy that contains one DLP rule

one DLP policy that contains two DLP rules

two DLP policies that each contains one DLP rule

Q37. You have a Microsoft 365 IS subscription that contains the resources shown in the following table.

The subscription contains a Windows 11 device named Device 1 and has the Microsoft Purview Information Protection client installed. Device i contains the resources shown in the following table.

You publish a sensitivity label named Label1 to User1 and Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Q38. You have a Microsoft 365 IS subscription that contains the resources shown in the following table.

The subscription contains a Windows 11 device named Device 1 and has the Microsoft Purview Information Protection client installed. Device i contains the resources shown in the following table.

You publish a sensitivity label named Label1 to User1 and Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Q39. You have a Microsoft 365 E5 subscription.
You create a sensitivity label named Label1 and publish Label1 to all users and groups.
You have the following files in a SharePoint site:
* File1.doc
* File2.docx
* File3.xlsx
* File4.txt
You need to identify which files can have Label1 applied.
Which files should you identify?

File1.doc File2-docx, and File3.xlsx only

File1.doc File2-docx, File3.xlsx, and File4.txt

File2.docx only

File2.docx and File3.xlsx only

Q40. Hotspot Question
You have a Microsoft 365 tenant named contoso.com that contains two users named User1 and User2. The tenant uses Microsoft Purview Message Encryption.
User1 plans to send emails that contain attachments as shown in the following table.

User2 plans to send emails that contain attachments as shown in the following table.

For which emails will the attachments be encrypted? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.