SC-401 · Question #199
SC-401 Question #199: Real Exam Question with Answer & Explanation
The correct answer is B: Turn on indicators.. Turning on indicators is required to enable the monitoring of user activities, such as file sharing and access to sensitive data, which are used by insider risk policies to evaluate risk. Creating an insider risk policy allows you to define risk scenarios, such as data leaks to e
Question
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to deploy a Microsoft Purview insider risk management solution that will generate an alert when users share sensitive information on Site1 with external recipients. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.
Options
- ATurn on analytics.
- BTurn on indicators.
- CConfigure adaptive protection.
- DCreate an insider risk policy.
- ECreate a data loss prevention (DLP) policy.
Explanation
Turning on indicators is required to enable the monitoring of user activities, such as file sharing and access to sensitive data, which are used by insider risk policies to evaluate risk. Creating an insider risk policy allows you to define risk scenarios, such as data leaks to external users, and trigger alerts when the policy conditions are met, including sensitive info sharing from SharePoint Online (Site1). https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-policy-indicators
Topics
Community Discussion
No community discussion yet for this question.