SC-401 Question #33: Real Exam Question with Answer & Explanation

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You recently discovered that the developers at your company emailed Azure Storage Account keys in plain text to third parties. You need to ensure that when Azure Storage Account keys are emailed, the emails are encrypted. Solution: You create a data loss prevention (DLP) policy that has only the Exchange email location selected. Does this meet the goal?

Options

• AYes
• BNo

Explanation

{"question_number": 4, "correct_answer": "A", "explanation": "Creating a DLP policy with only the Exchange email location selected DOES meet the goal. Microsoft Purview DLP policies can detect sensitive information types (including Azure Storage Account keys, which is a built-in SIT) in Exchange email. You can configure the policy rule to detect that SIT and apply a protective action such as encrypting the message using Microsoft Purview Message Encryption (OME). Scoping the policy to Exchange ensures it evaluates outbound emails and enforces encryption when the SIT is detected, fully satisfying the requirement.", "generated_by": "claude-sonnet", "llm_judge_score": 3}

No community discussion yet for this question.