Free 2021 Microsoft SC-400 Questions and Answers

1. SC-400 Free Questions SC-400 Free Questions Microsoft Information Protection Administrator Microsoft Information Protection Administrator https://www.passquestion.com/ https://www.passquestion.com/SC-400 SC-400.html .html

2. Question 1 Question 1 You have a data loss prevention (DLP) policy that applies to the Devices location. The You have a data loss prevention (DLP) policy that applies to the Devices location. The policy protects documents that contain States passport numbers. policy protects documents that contain States passport numbers. Users reports that they cannot upload documents to a travel management website because Users reports that they cannot upload documents to a travel management website because of the policy. of the policy. You need to ensure that the users can upload the documents to the travel management You need to ensure that the users can upload the documents to the travel management website. The solution must prevent the protected content from being uploaded to other website. The solution must prevent the protected content from being uploaded to other locations. locations. Which Microsoft 365 Endpoint data loss prevention (Endpoint DLP) setting should you Which Microsoft 365 Endpoint data loss prevention (Endpoint DLP) setting should you configure? configure? A. Unallowed apps A. Unallowed apps B. File path exclusions B. File path exclusions C. Service domains C. Service domains D. Unallowed browsers D. Unallowed browsers Answer: C Answer: C

3. Question 2 Question 2 You are planning a data loss prevention (DLP) solution that will apply to computers that You are planning a data loss prevention (DLP) solution that will apply to computers that run Windows 10. run Windows 10. You need to ensure that when users attempt to copy a file that contains sensitive You need to ensure that when users attempt to copy a file that contains sensitive information to a USB storage device, the following requirements are met: information to a USB storage device, the following requirements are met: * * If the users are members of a group named Group1, the users must be allowed to copy If the users are members of a group named Group1, the users must be allowed to copy the file, and an event must be recorded in the audit log. the file, and an event must be recorded in the audit log. * * All other users must be blocked from copying the file. All other users must be blocked from copying the file. What should you create? What should you create? A. one DLP policy that contains one DLP rule A. one DLP policy that contains one DLP rule B. two DLP policies that each contains on DLP rule B. two DLP policies that each contains on DLP rule C. one DLP policy that contains two DLP rules C. one DLP policy that contains two DLP rules Answer: B Answer: B

4. Question 3 Question 3 You need to protect documents that contain credit card numbers from being opened by users outside You need to protect documents that contain credit card numbers from being opened by users outside your company. The solution must ensure that users at your company can open the documents. your company. The solution must ensure that users at your company can open the documents. What should you use? What should you use? A. a sensitivity label policy A. a sensitivity label policy B. a sensitivity label B. a sensitivity label C. a retention policy C. a retention policy D. a data loss prevention (DLP) policy D. a data loss prevention (DLP) policy Answer: D Answer: D

5. Question 4 Question 4 You plan to implement sensitivity labels for Microsoft Teams. You plan to implement sensitivity labels for Microsoft Teams. You need to ensure that you can view and apply sensitivity labels to new Microsoft Teams sites. You need to ensure that you can view and apply sensitivity labels to new Microsoft Teams sites. What should you do first? What should you do first? A. Run the Set-sposite cmdlet. A. Run the Set-sposite cmdlet. B. Configure the EnableMTPLabels Azure Active Directory (Azure AD) setting. B. Configure the EnableMTPLabels Azure Active Directory (Azure AD) setting. C. Create a new sensitivity label scoped to Groups & sites. C. Create a new sensitivity label scoped to Groups & sites. D. Run the Execute-AzureAdLabelSync cmdtet. D. Run the Execute-AzureAdLabelSync cmdtet. Answer: C Answer: C

6. Question 5 Question 5 Note: This question is part of a series of questions that present the same scenario. Each question in Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. questions will not appear in the review screen. You recently discovered that the developers at your company emailed Azure Storage keys in plain You recently discovered that the developers at your company emailed Azure Storage keys in plain text to third parties. text to third parties. You need to ensure that when Azure Storage keys are emailed, the emails are encrypted. You need to ensure that when Azure Storage keys are emailed, the emails are encrypted. Solution: You create a data loss prevention (DLP) policy that has all locations selected. Solution: You create a data loss prevention (DLP) policy that has all locations selected. Does this meet the goal? Does this meet the goal? A. Yes A. Yes B. No B. No Answer: B Answer: B

7. Question 6 Question 6 You have a Microsoft 365 tenant that uses 100 data loss prevention (DLP) policies. You have a Microsoft 365 tenant that uses 100 data loss prevention (DLP) policies. A Microsoft Exchange administrator frequently investigates emails that were blocked due to DLP A Microsoft Exchange administrator frequently investigates emails that were blocked due to DLP policy violations. policy violations. You need to recommend which DLP report the Exchange administrator can use to identify how You need to recommend which DLP report the Exchange administrator can use to identify how many messages were blocked based on each DLP policy. many messages were blocked based on each DLP policy. Which report should you recommend? Which report should you recommend? A. False positive and override A. False positive and override B. Third-party DLP policy matches B. Third-party DLP policy matches C. DLP policy matches C. DLP policy matches D. DLP incidents D. DLP incidents Answer: C Answer: C

8. Question 7 Question 7 You have a Microsoft 365 tenant. You have a Microsoft 365 tenant. You have a Microsoft SharePoint Online site that contains employment contracts in a folder named You have a Microsoft SharePoint Online site that contains employment contracts in a folder named EmploymentContracts. All the files in EmploymentContracts are marked as records. EmploymentContracts. All the files in EmploymentContracts are marked as records. You need to recommend a process to ensure that when a record is updated, the previous version of You need to recommend a process to ensure that when a record is updated, the previous version of the record is kept as a version of the updated record. the record is kept as a version of the updated record. What should you recommend? What should you recommend? A. Upload an updated file plan that contains the record definition. A. Upload an updated file plan that contains the record definition. B. Unlock the record, modify the record, and then lock the record. B. Unlock the record, modify the record, and then lock the record. C. Create a copy of the record and enter a version in the file metadata. C. Create a copy of the record and enter a version in the file metadata. D. Create a new label policy associated to an event that will apply to the record. D. Create a new label policy associated to an event that will apply to the record. Answer: B Answer: B

9. Question 8 Question 8 You have a Microsoft 365 tenant that uses records management. You have a Microsoft 365 tenant that uses records management. You use a retention label to mark legal files stored in a Microsoft SharePoint Online document library You use a retention label to mark legal files stored in a Microsoft SharePoint Online document library as as regulatory records. regulatory records. What can you do to the legal files? What can you do to the legal files? A. Rename the files. A. Rename the files. B. Edit the properties of the files. B. Edit the properties of the files. C. Change the retention label of the files. C. Change the retention label of the files. D. Copy the content of the files. D. Copy the content of the files. Answer: D Answer: D

10. Question 9 Question 9 Your company manufactures parts that are each assigned a unique 12-character alphanumeric serial Your company manufactures parts that are each assigned a unique 12-character alphanumeric serial number. Emails between the company and its customers refer in the serial number. number. Emails between the company and its customers refer in the serial number. You need to ensure that ail Microsoft Exchange Online emails containing the serial numbers are You need to ensure that ail Microsoft Exchange Online emails containing the serial numbers are retained for five years. retained for five years. Which three objects should you create? Each correct answer presents part of the solution. NOTE: Which three objects should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Each correct selection is worth one point. A. a trainable classifier A. a trainable classifier B. a sensitive info type B. a sensitive info type C. a retention polity C. a retention polity D. a data loss prevention (DLP) policy D. a data loss prevention (DLP) policy E. an auto-labeling policy E. an auto-labeling policy F. a retention label F. a retention label G. a sensitivity label G. a sensitivity label Answer: B,E,F Answer: B,E,F

11. Question 10 Question 10 After you answer a question in this section, you will NOT be able to return to it. As a result, these After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. questions will not appear in the review screen. You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP). You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP). You have computers that run Windows 10 and have Microsoft 365 Apps installed. The computers You have computers that run Windows 10 and have Microsoft 365 Apps installed. The computers are joined to Azure Active Directory (Azure AD). are joined to Azure Active Directory (Azure AD). You need to ensure that Endpoint DLP policies can protect content on the computers. You need to ensure that Endpoint DLP policies can protect content on the computers. Solution: You onboard the computers to Microsoft Defender for Endpoint. Solution: You onboard the computers to Microsoft Defender for Endpoint. Does this meet the goal? Does this meet the goal? A. Yes A. Yes B. No B. No Answer: A Answer: A