SC-400 Exam - Microsoft Information Protection Administrator

NEW QUESTION 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription.
You need to identify resumes that are stored in the subscription by using a built-in trainable classifier.
Solution: You create an auto-labeling policy for a sensitivity label.
Does this meet the goal?

• A. Yes
• B. NO

Answer: A

NEW QUESTION 2

You have a Microsoft 365 tenant that uses Microsoft Teams.
You need to ensure that all internal communication is stored for a minimum of seven years. What should you create first?

• A. a retention label
• B. a Microsoft SharePoint Online site
• C. a Microsoft Exchange Online shared mailbox
• D. a retention label policy

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide

NEW QUESTION 3

You create a label that encrypts email data.
Users report that they cannot use the label in Outlook on the web to protect the email messages they send.
You need to ensure that the users can use the new label to protect their email. What should you do?

• A. Wait six hours and ask the users to try again.
• B. Create a label policy.
• C. Create a new sensitive information type.
• D. Modify the priority order of label policies

Answer: D

NEW QUESTION 4

You have a Microsoft 365 E5 tenant.
You need to add a new keyword dictionary. What should you create?

• A. a trainable classifier
• B. a sensitivity label E3
• C. a sensitive info type
• D. a retention policy

Answer: C

NEW QUESTION 5

You have a Microsoft 365 E5 subscription.
You plan to implement retention policies for Microsoft Teams. Which item types can be retained?

• A. voice memos from the Teams mobile client
• B. embedded images
• C. code snippets

Answer: A

NEW QUESTION 6

You have a Microsoft 365 tenant that uses records management.
You use a retention label to mark legal files stored in a Microsoft SharePoint Online document library as
regulatory records.
What can you do to the legal files?

• A. Rename the files.
• B. Edit the properties of the files.
• C. Change the retention label of the files.
• D. Copy the content of the files.

Answer: D

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/records- management?view=o365-worldwide

NEW QUESTION 7

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You recently discovered that the developers at your company emailed Azure Storage keys in plain text to third parties.
You need to ensure that when Azure Storage keys are emailed, the emails are encrypted. Solution: You configure a mail flow rule that matches a sensitive info type.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 8

You are evaluating the technical requirements for the DLP reports. Which user can currently view the DLP reports?

• A. Admin4
• B. Admin1
• C. Admin5
• D. Admin2
• E. Admin3

Answer: E

NEW QUESTION 9

You have a Microsoft 365 subscription.
You have a user named User1. Several users have full access to the mailbox of User1. Some email messages sent to User1 appear to have been read and deleted before the
user viewed them.
When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1.
YOU run the Set-MailboxFolderPernission -Identity "User1" -User Userlfcontoso.com - AccessRights Owner command.
Does that meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 10

You plan to implement sensitivity labels for Microsoft Teams.
You need to ensure that you can view and apply sensitivity labels to new Microsoft Teams sites.
What should you do first?

• A. Run the Set-sposite cmdlet.
• B. Configure the EnableMTPLabels Azure Active Directory (Azure AD) setting.
• C. Create a new sensitivity label scoped to Groups & sites.
• D. Run the Execute-AzureAdLabelSync cmdtet.

Answer: C

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide

NEW QUESTION 11

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).
You have computers that run Windows 10 and have Microsoft 365 Apps installed. The computers are joined to Azure Active Directory (Azure AD).
You need to ensure that Endpoint DLP policies can protect content on the computers. Solution: You onboard the computers to Microsoft Defender for Endpoint.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started?view=o365-worldwide

NEW QUESTION 12

You have a Microsoft 365 E5 subscription.
You need to prevent users from uploading data loss prevention (DLP)-protected documents to the following third-party websites;
• web1.contoso.com
• web2.contoso.com
The solution must minimize administrative effort.
To what should you set the Service domains setting for Endpoint DLP?

• A. contoso.com
• B. web'.contoso.com
• C. *.contoso.com
• D. web1xontoso.com and web2.contoso.com

Answer: D

NEW QUESTION 13

You need to ensure that documents in a Microsoft SharePoint Online site that contain a reference to Project
Alpha are retained for two years, and then deleted.
Which two objects should you create? Each correct answer presents part of the solution. (Choose two.)
NOTE: Each correct selection is worth one point.

• A. a retention policy
• B. an auto-apply label policy
• C. a sensitive info type
• D. a retention label
• E. a sensitivity label
• F. a publishing label policy

Answer: BD

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-retention-labels-automatically?view=o365Worldwide

NEW QUESTION 14
HOTSPOT
You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

You need to onboard the devices to Microsoft Purview. The solution must ensure that you can apply Endpoint data loss prevention (Endpoint DLP) policies to the devices. What can you use to onboard each device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15

You have a Microsoft 365 E5 subscription that contains a user named User1.
You need to ensure that all email messages that contain attachments are encrypted automatically by using Microsoft Purview Message Encryption.
What should you create?

• A. a sensitivity label
• B. an information barrier segment
• C. a data loss prevention (DLP) policy
• D. a mail flow rule

Answer: D

NEW QUESTION 16
......