SC-401 Exam Questions
164 real SC-401 exam questions with expert-verified answers and explanations. Page 1 of 4.
- Question #1Implement information protection
Case Study 1 - Contoso, Ltd Overview Contoso, Ltd. is a consulting company that has a main office in Montreal and three branch offices in Seattle, Boston, and Johannesburg. Existin...
Sensitivity LabelsMicrosoft 365 RolesInformation ProtectionLeast Privilege - Question #2
Case Study 1 - Contoso, Ltd Overview Contoso, Ltd. is a consulting company that has a main office in Montreal and three branch offices in Seattle, Boston, and Johannesburg. Existin...
- Question #7Implement information protection
You have a Microsoft 365 E5 subscription that contains a Microsoft Teams channel named Channel1. Channel1 contains research and development documents. You plan to implement Microso...
Sensitivity LabelsMicrosoft 365 CopilotInformation ProtectionAccess Control - Question #8Implement information protection
You have a Microsoft 365 E5 subscription. You need to create a sensitivity label named Label1. The solution must ensure that users can use Microsoft 365 Copilot to summarize files...
Sensitivity LabelsMicrosoft 365 CopilotInformation ProtectionUsage Rights - Question #9Implement information protection
You have a Microsoft 365 E5 subscription. You need to enable support for sensitivity labels in Microsoft SharePoint Online. What should you use?
Sensitivity LabelsSharePoint OnlineInformation ProtectionAdmin Center - Question #10Implement information protection
You have a Microsoft 365 subscription. You need to customize encrypted email for the subscription. The solution must meet the following requirements. - Ensure that when an encrypte...
Microsoft 365 Message Encryption (OME)Email EncryptionInformation ProtectionPowerShell - Question #11Implement information protection
You have a Microsoft 365 E5 subscription. You need to ensure that encrypted email messages sent to an external recipient can be revoked or will expire within seven days. What shoul...
sensitivity labelsemail encryptioninformation protectiondata expiration - Question #12Implement information protection
You have a Microsoft SharePoint Online site named Site1 that contains a document library. The library contains more than 1,000 documents. Some of the documents are job applicant re...
Trainable classifiersContent classificationSensitivity labelsAutomatic labeling - Question #13Implement data loss prevention and retention
You are planning a data loss prevention (DLP) solution that will apply to Windows Client computers. You need to ensure that when users attempt to copy a file that contains sensitiv...
DLP PolicyDLP RuleEndpoint DLPConditional Access - Question #14Implement data loss prevention and retention
You have a Microsoft 365 subscription. You need to ensure that users can apply retention labels to individual documents in their Microsoft SharePoint libraries. Which two actions s...
Retention labelsMicrosoft PurviewSharePoint retentionLabel publication - Question #15Implement data loss prevention and retention
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to implement Microsoft Purview data lifecycle management. What shoul...
Microsoft PurviewData Lifecycle ManagementRetention LabelsInformation Governance - Question #16Implement data loss prevention and retention
You have a Microsoft 365 E5 subscription. You need to create static retention policies for the following locations: - Teams chats - Exchange email - SharePoint sites - Microsoft 36...
Retention policiesInformation GovernanceMicrosoft 365 ComplianceData retention - Question #17Implement data loss prevention and retention
You have a data loss prevention (DLP) policy configured for endpoints as shown in the following exhibit. From a computer named Computer1, a user can sometimes upload files to cloud...
Endpoint DLPDLP policy configurationFile upload restrictionsDLP troubleshooting - Question #18Implement data loss prevention and retention
You have a Microsoft 365 E5 subscription that contains a retention policy named RP1 as shown in the following table. You place a preservation lock on RP1. You need to modify RP1. W...
Retention PoliciesPreservation LockMicrosoft 365 ComplianceInformation Governance - Question #19Implement data loss prevention and retention
You have a Microsoft 365 E5 tenant that has devices onboarded to Microsoft Defender for Endpoint as shown in the following table. You plan to start using Microsoft 365 Endpoint dat...
Endpoint DLPMicrosoft PurviewDevice SupportMicrosoft Defender for Endpoint - Question #20Implement data loss prevention and retention
You have a Microsoft 365 tenant. You have a database that stores customer details. Each customer has a unique 13-digit identifier that consists of a fixed pattern of numbers and le...
DLP PoliciesSensitive Information TypesCustom Sensitive DataDLP Rules - Question #21Implement data loss prevention and retention
You have a Microsoft 365 E5 subscription. You need to prevent users from uploading data loss prevention (DLP)-protected documents to the following third-party websites: - web1.cont...
Endpoint DLPData Loss Prevention (DLP)Service domainsUnallowed websites - Question #22Implement data loss prevention and retention
You are creating a data loss prevention (DLP) policy that will apply to all available locations except Fabric and Power BI workspaces. You configure an advanced DLP rule in the pol...
DLP policyDLP rulesSensitive info typesPolicy configuration - Question #23Implement data loss prevention and retention
You have Microsoft 365 E5 subscription that uses data loss prevention (DLP) to protect sensitive information. You have a document named Form.docx. You plan to use PowerShell to cre...
Data Loss Prevention (DLP)Document FingerprintingPowerShellMicrosoft Purview Compliance - Question #24Implement information protection
You receive an email that contains a list of words that will be used for a sensitive information type. You need to create a file that can be used as the source of a keyword diction...
Sensitive Information Types (SITs)Keyword dictionaryMicrosoft PurviewInformation protection - Question #25Implement data loss prevention and retention
Your company has a Microsoft 365 tenant. The company performs annual employee assessments. The assessment results are recorded in a document named AssessmentTemplate.docx that is c...
Data Loss Prevention (DLP)Document FingerprintSensitive Information TypesMicrosoft 365 - Question #26Implement data loss prevention and retention
You have a Microsoft 365 E5 subscription that uses Microsoft Purview. You are creating an exact data match (EDM) classifier named EDM1. For EDM1, you upload a schema file that cont...
Exact Data Match (EDM)Sensitive Information Types (SIT)Microsoft PurviewDLP Configuration - Question #27Implement data loss prevention and retention
You have a Microsoft 365 E5 subscription that contains a trainable classifier named Trainable1. You plan to create the items shown in the following table. Which items can use Train...
Trainable ClassifiersData Loss Prevention (DLP)Sensitivity LabelsAuto-labeling - Question #28Implement information protection
You have a Microsoft 365 E5 tenant. You need to add a new keyword dictionary. What should you create?
Sensitive information types (SITs)Keyword dictionariesData classification - Question #29Implement data loss prevention and retention
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Endpoint DLPDLP PoliciesApplication ControlFile Path Exclusions - Question #30Implement data loss prevention and retention
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Microsoft Defender for Cloud AppsApp DiscoveryEndpoint DLPSensitive Information Protection - Question #31Implement data loss prevention and retention
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Defender for Cloud AppsUnsanctioned applicationsInformation ProtectionData Loss Prevention - Question #32Implement data loss prevention and retention
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Mail flow rulesSensitive info typesEmail encryptionData Loss Prevention (DLP) - Question #33Implement data loss prevention and retention
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Data Loss Prevention (DLP)Email EncryptionAzure Storage Account KeysMicrosoft Purview - Question #34Implement data loss prevention and retention
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Mail flow rulesEmail encryptionData loss prevention (DLP)Sensitive information detection - Question #35Manage risks, alerts, and activities
You have a Microsoft 365 E5 subscription that contains the users shown in the following table. Which users will Microsoft Purview insider risk management flag as potential high-imp...
Microsoft PurviewInsider Risk ManagementHigh-impact usersRisk detection - Question #36Manage risks, alerts, and activities
You have a Microsoft 365 E5 subscription. You need to review a Microsoft 365 Copilot usage report. From where should you review the report?
Microsoft 365 CopilotUsage ReportsMicrosoft 365 admin centerService Administration - Question #37Manage risks, alerts, and activities
You have a Microsoft 365 E5 subscription. You plan to implement Microsoft Purview insider risk management. You implement the HR data connector. You need to prepare the data that wi...
Microsoft PurviewInsider Risk ManagementHR Data ConnectorCSV Format - Question #38Manage risks, alerts, and activities
You have a Microsoft 365 E5 subscription. You plan to implement insider risk management for users that manage sensitive data associated with a project. You need to create a protect...
Insider Risk ManagementMicrosoft PurviewMicrosoft Entra IDSecurity Groups - Question #39Manage risks, alerts, and activities
You have a Microsoft 365 E5 subscription. The subscription contains 500 devices that are onboarded to Microsoft Purview. You select Activate Microsoft Purview Audit. You need to en...
Microsoft Purview AuditBrowser ExtensionWeb Activity TrackingGenerative AI Monitoring - Question #40Manage risks, alerts, and activities
You have a Microsoft 365 E5 subscription that uses Microsoft Purview. You create a communication compliance policy named Policy1 and select Detect Microsoft Copilot interactions. W...
Microsoft PurviewCommunication ComplianceMicrosoft CopilotTrainable Classifiers - Question #41Manage risks, alerts, and activities
Your company has offices in multiple countries. The company has a Microsoft 365 E5 subscription that uses Microsoft Purview insider risk management. You plan to perform the followi...
Insider Risk ManagementAdministrative UnitsDelegated Administration - Question #42Manage risks, alerts, and activities
You have a Microsoft 365 subscription. Users have devices that run Windows 11. You plan to create a Microsoft Purview insider risk management policy that will detect when a user pe...
Insider Risk ManagementDevice OnboardingEndpoint MonitoringMicrosoft Purview - Question #43Manage risks, alerts, and activities
You have Microsoft 365 E5 subscription. You create two alert policies named Policy1 and Policy2 that will be triggered at the times shown in the following table. How many alerts wi...
Microsoft Purview alertsAlert policiesAlert management - Question #44Manage risks, alerts, and activities
You need to be alerted when users share sensitive documents from Microsoft OneDrive to any users outside your company. What should you do?
Activity policiesMicrosoft Defender for Cloud AppsExternal sharingSecurity alerts - Question #45Manage risks, alerts, and activities
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Mailbox AuditingExchange Online PowerShellMailbox PermissionsAudit Logging - Question #46Manage risks, alerts, and activities
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Mailbox AuditingAdmin AuditingSecurity AuditingMicrosoft Purview - Question #47Manage risks, alerts, and activities
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Mailbox auditingAudit logPowerShellUser activity monitoring - Question #48Implement data loss prevention and retention
Drag and Drop Question You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps. You plan to deploy a Defender for Cloud Apps file policy that will be t...
Microsoft Defender for Cloud AppsFile PoliciesData Loss PreventionInformation Protection - Question #59Implement data loss prevention and retention
Drag and Drop Question You have a Microsoft 365 E5 subscription that has data loss prevention (DLP) implemented. You need to create a custom sensitive info type. The solution must...
Custom Sensitive Info TypesData Loss Prevention (DLP)Regular ExpressionsKeyword Proximity - Question #61Implement data loss prevention and retention
Drag and Drop Question You need to create a trainable classifier that can be used as a condition in an auto-apply retention label policy. Which three actions should you perform in...
Trainable classifiersAuto-apply retention labelsData classificationMicrosoft Purview - Question #64Manage risks, alerts, and activities
Drag and Drop Question You have a Microsoft 365 subscription that contains 20 data loss prevention (DLP) policies. You need to identify the following: - Rules that are applied with...
DLP ReportingDLP IncidentsPolicy MatchesCompliance Monitoring - Question #73Manage risks, alerts, and activities
You have a Microsoft 365 E5 subscription. You plan to use Microsoft Purview insider risk management. You need to create an insider risk management policy that will detect data thef...
Insider risk managementHR data connectorMicrosoft PurviewData theft detection - Question #74Implement information protection
You have a Microsoft 365 E5 subscription. You create a sensitivity label named Label1 and publish Label1 to all users and groups. You have the following files on a computer: - File...
Sensitivity LabelsInformation ProtectionSupported File Types - Question #75Manage risks, alerts, and activities
You have a Microsoft 365 E5 subscription. Microsoft Purview Compliance Manager has the improvement actions shown in the following table. Automatic testing is disabled for all impro...
Microsoft Purview Compliance ManagerImprovement ActionsTest statusCompliance score