Microsoft SC-401 Exam Dumps

You have a Microsoft 365 subscription. You configure a Microsoft Purview insider risk management policy named Policy1. You need to ensure that you will receive real-time recommendations on how to configure the indicator thresholds for Policy1. The solution must ensure that the recommendations are based on a user's activity from the past 10 days. What should you do first? 

You have a Microsoft 565 E5 subscription. You plan to use Microsoft Purview insider risk management. You need to create an insider risk management policy that will detect data theft from Microsoft SharePoint Online by users that submitted their resignation or are near their employment termination date. What should you do first? 

You have a Microsoft 36S ES subscription that contains a Windows 11 device named Device 1 and three users named User 1. User2. and User3. You plan to deploy Azure Information Protection (AIP) and the Microsoft Purview Information Protection client to Device 1. You need to ensure that the users can perform the following actions on Device1 as part of the planned deployment • User 1 will test the functionality of the client. • User2 will install and configure the Microsoft Rights Management connector. • User3 will be configured as the service account for the information protection scanner. The solution must maximize the security of the sign-in process for the users What should you do? 

You have a Microsoft 365 E5 subscription. You need to enable support for sensitivity labels in Microsoft SharePoint Online. What should you use? 

You have a Microsoft 365 subscription. You create a new trainable classifier. You need to train the classifier. Which source can you use to train the classifier? 

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You recently discovered that the developers at your company emailed Azure Storage Account keys in plain text to third parties. You need to ensure that when Azure Storage Account keys are emailed, the emails are encrypted. Solution: You configure a mail flow rule that matches the text patterns. Does this meet the goal? 

You have a Microsoft J65 subscription linked to a Microsoft Entra tenant that contains a user named User1. You need to grant User1 permission to search Microsoft 365 audit logs. The solution must use the principle of least privilege. Which role should you assign to User1? 

You need to create a retention policy to delete content after seven years from the following locations: • Exchange Online email • SharePoint Online sites • OneDrive accounts • Microsoft 365 Groups • Teams channel messages • Teams chats What is the minimum number of retention policies that you should create?

You have a Microsoft 365 E5 subscription. You need to review a Microsoft 365 Copilot usage report. From where should you review the report? 

You have a Microsoft 365 E5 subscriptions. You deploy Microsoft Purview Data Security Posture Management for Al (DSPM for Al). You need to edit the default policies created as part of the deployment. Which two Microsoft Purview solutions should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You recently discovered that the developers at your company emailed Azure Storage Account keys in plain text to third parties. You need to ensure that when Azure Storage Account keys are emailed, the emails are encrypted. Solution: You configure a mail flow rule that matches a sensitive info type. Does this meet the goal?

You need to be alerted when users share sensitive documents from Microsoft OneDrive to any users outside your company. What should you do? 

You have a Microsoft 36S ES subscription You plan to create an met data match (EDM) classifier named EDM1. You need to grant permissions to hash and upload the sensitive ^formation source table for EDMI. What should you create first? 

You have a Microsoft 365 ES subscription. You have a Microsoft SharePoint Online document library that contains Microsoft Word and Excel documents. The documents contain the following types of information: • Credit card numbers • Physical addresses in the UK • National hearth service numbers from the UK • Sensitive projects that contain the following words: Project Tailspin. Project Contoso, and Project falcon You have email messages m Microsoft Exchange Online that contain the following information types: • Credit card numbers • User sign-in credentials • National health service numbers from the UK You plan to use sensitive information types (SITs) for compliance policies. What is the minimum number of SITs required to classify all the information types?

You have a Microsoft 365 tenant that uses Microsoft Purview Message Encryption. You need to ensure that any emails containing attachments and sent to [email protected] are encrypted automatically by using Microsoft Purview Message Encryption. What should you do? 

You have a Microsoft 365 subscription. You create and run a content search from the Microsoft Purview portal. You need to download the results of the content search. What should you obtain first? 

You have a Microsoft 365 E5 subscription. You plan to implement insider risk management for users that manage sensitive data associated with a project. You need to create a protection policy for the users. The solution must meet the following requirements: Minimize the impact on users who are NOT part of the project. Minimize administrative effort. What should you do first?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 tenant and 500 computers that run Windows 11. The computers are onboarded to Microsoft Purview. You discover that a third-party application named Tailspin_scanner.exe accessed protected sensitive information on multiple computers. Tailspin_scanner.exe is installed locally on the computers. You need to block Tailspin_scanner.exe from accessing sensitive documents without preventing the application from accessing other documents. Solution: From Microsoft Defender for Cloud Apps, you create an app discovery policy. Does this meet the goal? 

You have a Microsoft 565 E5 tenant that uses Microsoft Teams and contains two users named User1 and User2. You create a data Joss prevention (DIP) policy that is applied to the Teams chat and channel messages location for User1 and User? Which Teams entities will have DLP protection? 

You have a Microsoft $65 subscription. You plan to retain the following audit log record types and activities for the next three years. • Copilotlnteraction: All activities selected (1/1) o Interacted with Copilot • Compliance DLP endpoint: All activities selected {2/2) o Matched DIP rule o Removed Dl P rule from document • AzureActiveDirectory 2 of 25 activities selected (2/25) o Reset user password o Changed user password What is the minimum number of audit retention policies you should create to retain only the selected record types and activities? 

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to deploy a Microsoft Purview insider risk management solution that will generate an alert when users share sensitive information on Site1 with external recipients. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point. 

You have a Microsoft 365 tenant. You have a database that stores customer details. Each customer has a unique 13-digit identifier that consists of a fixed pattern of numbers and letters. You need to implement a data loss prevention (DLP) solution that meets the following requirements: Email messages that contain a single customer identifier can be sent outside your company. Email messages that contain two or more customer identifiers must be approved by the company's data privacy team. Which two components should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

You have a Microsoft 365 subscription. You have a user named User1 Several users have full access to the mailbox of User1. Some email messages sent to User 1 appeal to have been read and deleted before the user viewed them When you search the audit log in the Microsoft Purview portal to identify who signed in to the mailbox of User l. the results are blank. You need to ensure that you can view future sign-ins to the mailbox of User1. Solution: You run the Set-AuditConfig -Workload Exchange command. Does that meet the goal?

You have a Microsoft 365 subscription that contains two Microsoft SharePoint Online sites named Site1 and Site2. You plan to use policies to meet the following requirements: • Add a watermark of Confidential to a document if the document contains the words Project1 or Project2. • Retain a document for seven years if the document contains credit card information. • Add a watermark of Internal Use Only to all the documents stored on Site2. • Add a watermark of Confidential to all the documents stored on Site1. You need to recommend the minimum number of sensitive info types required. How many sensitive info types should you recommend?

You have a Microsoft 365 E5 subscription that contains 500 Windows devices. You plan to deploy Microsoft Purview Data Security Posture Management for AI (DSPM for AI). You need to ensure that you can monitor user activities on third-party generative AI websites. Which two prerequisites should you complete for DSPM for AI? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.