SC-401 Question #220: Real Exam Question with Answer & Explanation

Question

You have a Microsoft 365 E5 subscription. You have a Microsoft SharePoint Online document library that contains Microsoft Word and Excel documents. The documents contain the following types of information: - Credit card numbers - Physical addresses in the UK - National health service numbers from the UK - Sensitive projects that contain the following words: Project Tailspin, Project Contoso, and Project Falcon You have email messages in Microsoft Exchange Online that contain the following information types: - Credit card numbers - User sign-in credentials - National health service numbers from the UK You plan to use sensitive information types (SITs) for compliance policies. What is the minimum number of SITs required to classify all the information types?

Options

• A2
• B5
• C7
• D10

Explanation

• In Documents: Sensitive projects that contain the following words: Project Tailspin, Project Contoso, and Project Falcon - One SIT * In documents: Physical addresses in the UK - one SIT * Credit card numbers in documents and emails - one SIT a single sensitive information type for credit card numbers can be applied to both documents and emails, often as part of a data loss prevention (DLP) or sensitivity labeling system in Microsoft 365 and other platforms. These systems can automatically detect credit card numbers within documents and emails and then apply predefined sensitivity labels that enforce security policies, such as encryption or access restrictions, for both types of content. * User sign-in credentials in emails - one SIT * National health service numbers from the UK in documents and emails - one SIT A single sensitive information type classification, such as for UK National Health Service (NHS) numbers, can be applied to both documents and emails, typically by using a data loss prevention (DLP) or sensitivity labelling system within Microsoft 365 or NHSmail. This allows a uniform policy to detect and protect NHS numbers whether they appear in a Word document or an email, ensuring consistent security protocols across different data formats within the NHS environment. https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-learn-about

No community discussion yet for this question.