SC-400 Free Practice Questions — Page 10

Question 94

You have a Microsoft 365 E5 tenant that has data loss prevention (DLP) policies. You need to create a report that includes the following: • Documents that have a matched DLP policy. • Documents that have had a sensitivity label changed. • Documents that have had a sensitivity label changed. What should you use?

Question 95

You have a Microsoft 365 subscription. From Microsoft Purview, you plan to create a content search for email messages that have a recipient of either or user2.contoso.com. You need to add a condition to the KQL editor for the content search. Which KQL query should you add as a condition?

Question 96

HOTSPOT - You have a Microsoft 365 E5 subscription. You plan to create a new sensitive information type (SIT) by using the Microsoft Purview compliance portal. You need to copy and modify an existing SIT from which to create the new SIT. What are two SITs that you can copy and modify? To answer, select the appropriate SITs in the answer area. NOTE: Each selection is worth one point.

Question 97

You have a Microsoft 365 E5 subscription. You need to review the compliance of the subscription with the General Data Protection Regulation (GDPR) by using Compliance Manager. The solution must minimize administrative effort. What should you create first?

Question 98

DRAG DROP - You have a Microsoft 365 E5 subscription. You need to create the Microsoft Purview insider risk management policies shown in the following table. Which policy template should you use for each policy? To answer, drag the appropriate policy templates to the correct policies. Each template may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 99

HOTSPOT - You have a Microsoft 365 E5 subscription that contains a security group named Group1 and the users shown in the following table. You assign the Compliance Manager roles to the users as shown in the following table. You add two assessments to Compliance Manager as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 100

You have a Microsoft 365 subscription. You create and run a content search from the Microsoft Purview compliance portal. You need to download the results of the content search. What should you obtain first?

Question 101

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 subscription. You have a user named User1. Several users have full access to the mailbox of User1. Some email messages sent to User1 appear to have been read and deleted before the user viewed them. When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank. You need to ensure that you can view future sign-ins to the mailbox of User1. Solution: You run the Set-Mailbox -Identity "User1" -AuditEnabled $true command. Does that meet the goal?

Question 102

DRAG DROP - You have a Microsoft 365 subscription that contains 20 data loss prevention (DLP) policies. You need to identify the following: • Rules that are applied without triggering a policy alert • The top 10 files that have matched DLP policies • Alerts that are miscategorized Which report should you use for each requirement? To answer, drag the appropriate reports to the correct requirements. Each report may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 103

HOTSPOT - You have a Microsoft 365 E5 subscription that uses data loss prevention (DLP) to protect sensitive information. You need to create scheduled reports that generate: • DLP policy matches reported over the shortest frequency of time • DLP incidents reported over the longest frequency of time Which frequency should you configure for each report? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.