SC-401 Question #167: Real Exam Question with Answer & Explanation

Question

You create a data loss prevention (DLP) policy. The Advanced DLP rules page is shown in the Rules exhibit. (Click the Rules tab) The Review your settings page is shown in the Review exhibit. (Click the Review tab.) You need to review the potential impact of enabling the policy without applying the actions. What should you do?

Options

• AExit the policy, and then select I'd like to test it out first.
• BEdit the policy, remove all the actions in DLP rule 1, and select I'd like to test it out first.
• CEdit the policy, remove the Restrict access to the content and Send incident report to
• DEdit the policy, remove all the actions in DLP rule 1, and select Yes, turn it on right away.

Explanation

{"question_number": 7, "correct_answer": "A", "explanation": "Exiting the policy wizard and selecting 'I'd like to test it out first' places the DLP policy in simulation (test) mode. In this mode, the policy evaluates content and generates alerts in the DLP Activity Explorer without enforcing any blocking or restrictive actions. This allows administrators to review the policy's potential impact and false positives before enabling full enforcement. Removing actions manually (options B and D) is unnecessary because test mode already suppresses action enforcement.", "generated_by": "claude-sonnet", "llm_judge_score": 3}

No community discussion yet for this question.