Practice Free SC-401 Exam Online Questions

You have a Microsoft 365 E5 subscription.

A security manager receives an email message every time a data loss prevention (DLP) policy match occurs.

You need to limit alert notifications to actionable DLP events.

What should you do?

Reveal Solution Hide Solution

HOTSPOT

You have a Microsoft 365 E5 subscription.

You plan to implement Microsoft Purview insider risk management.

You need to recommend policy templates that meet the following requirements:

• Contain risk indicators and scoring for when a user receives a poor performance review.

• Contain risk indicators and scoring for when a user disables security features on a device.

Which template should you use for each requirement? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

HOTSPOT

You have a Microsoft 365 E5 subscription.

You plan to implement Microsoft Purview insider risk management.

You need to recommend policy templates that meet the following requirements:

• Contain risk indicators and scoring for when a user receives a poor performance review.

• Contain risk indicators and scoring for when a user disables security features on a device.

Which template should you use for each requirement? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

You are creating a DLP policy named Policy1 that will be applied to the locations as shown in the following exhibit.

Policy1 contains an advanced data loss prevention (DLP) rule named Rule 1.

Which two conditions can you use in Rule1? Each correct answer presents a complete solution . NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

You are planning a data loss prevention (DLP) solution that will apply to Windows Client computers.

You need to ensure that when users attempt to copy a file that contains sensitive information to a USB storage device, the following requirements are met:

If the users are members of a group named Group1, the users must be allowed to copy the file, and an event must be recorded in the audit log.

All other users must be blocked from copying the file.

What should you create?

Reveal Solution Hide Solution

You have a Microsoft 365 subscription that contains two Microsoft SharePoint Online sites named Site1 and Site2.

You plan to use policies to meet the following requirements:

• Add a watermark of Confidential to a document if the document contains the words Project1 or Project2.

• Retain a document for seven years if the document contains credit card information.

• Add a watermark of Internal Use Only to all the documents stored on Site2.

• Add a watermark of Confidential to all the documents stored on Site 1.

You need to recommend the minimum number of sensitive info types required.

How many sensitive info types should you recommend?

Reveal Solution Hide Solution

HOTSPOT

You have a Microsoft 365 E5 subscription that uses Microsoft Purview and just-in-time (JIT) protection.

The subscription contains the users shown in the following table.

The subscription contains the devices shown in the following table.

The devices contain the files shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

HOTSPOT

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

The subscription contains the groups shown in the following table.

You plan to create a priority user group named Priority 1.

You need to identify the following:

• Which users and groups can be added to Priority1?

• Which users can be enabled to view alerts that involve the members of Priority1?

What should you identify? To answer, select the appropriate options in the answer area.

Reveal Solution Hide Solution

Correct Answer:

HOTSPOT

You have a Microsoft SharePoint Online site named Site1 that has the users shown in the following table.

You create the retention labels shown in the following table.

You publish the retention labels to Site 1.

On March 1, 2023, you assign the retention labels to the files shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Reveal Solution Hide Solution

Correct Answer:

You have a Microsoft 365 E5 subscription.

You are implementing insider risk management.

You need to maximize the amount of historical data that is collected when an event is triggered.

What is the maximum number of days that historical data can be collected?

Reveal Solution Hide Solution