CertBlaze

Microsoft

SC-400 Free Practice Questions — Page 15

Question 147

HOTSPOT - You have a Microsoft 365 subscription. You are creating a retention policy named Retention1 as shown in the exhibit. (Click the Exhibit tab.) You apply Retention1 to SharePoint sites and OneDrive accounts. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Illustration for SC-400 question 147 Illustration for SC-400 question 147
Show Answer
Correct Answer: Retained Can recover the file until March 1, 2025
Explanation:
Retention is 2 years based on the last modified date. Ongoing modifications reset the retention clock, so a file modified every six months is never deleted. A deleted OneDrive file remains protected by retention until 2 years after its last modification (March 1, 2023 → March 1, 2025).

Question 148

HOTSPOT - You have a Microsoft 365 E5 subscription that contains two users named Admin1 and User1, a Microsoft SharePoint Online site named Site1, and a retention label named Retention1. The role assignments for Site1 are shown in the following table. Site1 includes a file named File1. Rentention1 has the following settings: • Retain items for a specific period: Retention period: 7 years • During the retention period: Mark items as a record • At the end of the retention period: Delete items automatically Rentention1 is published to Site1. User1 applies Retention1 to File1. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-400 question 148 Illustration for SC-400 question 148
Show Answer
Correct Answer: Yes No No
Explanation:
A retention label that marks an item as a record allows metadata changes such as renaming, but blocks content edits for a locked record. Removing the retention label requires appropriate records/compliance administration permissions, not a regular site member.

Question 149

You have a Microsoft 365 subscription. You need to ensure that users can apply retention labels to individual documents in their Microsoft SharePoint libraries. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. From the Microsoft Purview compliance portal, create a label.
B. From Microsoft Defender for Cloud Apps, create a file policy.
C. From the Microsoft Purview compliance portal, publish a label.
D. From the SharePoint admin center, modify the Site Settings.
E. From the SharePoint admin center, modify the records management settings.
Show Answer
Correct Answer: A, C
Explanation:
To allow users to apply retention labels to individual SharePoint documents, you must first create a retention label in the Microsoft Purview compliance portal and then publish the label so it becomes available to users and locations such as SharePoint. Defender for Cloud Apps file policies and SharePoint admin records management/site settings are not the required steps for making retention labels available on documents.

Question 150

HOTSPOT - You have a Microsoft 365 subscription. You create a retention label named Label1 as shown in the following exhibit. You publish Label1 to SharePoint sites. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Illustration for SC-400 question 150 Illustration for SC-400 question 150
Show Answer
Correct Answer: 1. never delete the file 2. be deleted automatically on March 15, 2025
Explanation:
The label retains content for 2 years based on the creation date, then deletes it automatically. Because the label classifies the item as a record, users cannot permanently delete it during the retention period; after the period ends, the policy deletes it automatically.

Question 151

You have Microsoft 365 E5 subscription that uses data loss prevention (DLP) to protect sensitive information. You have a document named Form.docx. You plan to use PowerShell to create a document fingerprint based on Form.docx. You need to first connect to the subscription. Which cmdlet should you run?

A. Connect-SPOService
B. Connect-IPPSSession
C. Connect-AzureAD
D. Connect-ExchangeOnline
Show Answer
Correct Answer: B
Explanation:
Document fingerprinting for Microsoft Purview DLP is managed through Security & Compliance (Microsoft Purview) PowerShell. The required connection cmdlet is Connect-IPPSSession, which connects to the compliance endpoint where document fingerprint cmdlets are available. Connect-SPOService is for SharePoint Online administration, Connect-AzureAD is for Azure AD, and Connect-ExchangeOnline connects to Exchange Online rather than the compliance PowerShell session.

Question 152

You have a Microsoft 365 E5 subscription. Users access their mailbox by using the following apps: • Outlook Win32 • Outlook on the web • Outlook for iOS and Android You create a data loss prevention (DLP) policy named DLP1 that has the following settings: • Location: Exchange email • Status: On • User notifications: On • Notify users in Office 365 service with a policy tip: Enabled Which apps display a policy tip when content is matched by using DLP1?

A. Outlook Win32 only
B. Outlook on the web only
C. Outlook Win32 and Outlook on the web only
D. Outlook Win32 and Outlook for iOS and Android only
E. Outlook Win32, Outlook on the web, and Outlook for iOS and Android
Show Answer
Correct Answer: C
Explanation:
Exchange DLP policy tips are supported in Outlook for Windows (Win32) and Outlook on the web. Outlook for iOS and Android does not display Exchange DLP policy tips, even when user notifications and policy tips are enabled.

Question 153

HOTSPOT - You have a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com. OneDrive stores files that are shared with external users. The files are configured as shown in the following table. You create a data loss prevention (DLP) policy that applies to the content stored in OneDrive accounts. The policy contains the following three rules: Rule1 - • Conditions: Label1, Detect content that's shared with people outside my organization • Actions: Restrict access to the content for external users • User notifications: Notify the user who last modified the content • User overrides: On • Priority: 0 Rule2: • Conditions: Label1 or Label2 • Actions: Restrict access to the content • Priority: 1 Rule3: • Conditions: Label2, Detect content that's shared with people outside my organization • Actions: Restrict access to the content for external users • User notifications: Notify the user who last modified the content • User overrides: On • Priority: 2 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-400 question 153 Illustration for SC-400 question 153
Show Answer
Correct Answer: No No No
Explanation:
Rule2 restricts access to the content for any item with Label1 or Label2, which is more restrictive than the external-only restriction in Rules 1 and 3. When multiple rules match, the most restrictive outcome is enforced. Therefore, all three files end up with full access restriction, so external users cannot access Files 1 or 3, and even internal users cannot access File2 until the restriction is addressed.

Question 154

You plan to create a new data loss prevention (DLP) policy named DIP1. DLP1 will be applied to the Exchange email location. You need to exclude two users named User1 and User2 from DLP1. What should you do first?

A. Create an organization sharing policy in Microsoft Exchange.
B. Create a mail flow rule in Microsoft Exchange.
C. Create a distribution list that contains User1 and User2.
D. Create an advanced DLP rule.
Show Answer
Correct Answer: C
Explanation:
To exclude specific users from an Exchange DLP policy using policy scoping or advanced conditions based on group membership, you first need a distribution group containing those users. After creating the group, you can exclude that group from the DLP policy or reference it in an advanced DLP rule. A sharing policy and mail flow rule do not accomplish DLP policy scoping, and an advanced DLP rule depends on having the group available if using group-based exclusion.

Question 155

HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table. The subscription contains the communication compliance policy shown in the following exhibit. Users send the email messages shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-400 question 155 Illustration for SC-400 question 155 Illustration for SC-400 question 155 Illustration for SC-400 question 155
Show Answer
Correct Answer: Yes Yes No
Explanation:
The policy supervises Group2 (User1). It applies to Exchange with communication direction Outbound and Internal. Mail1 (User1→User2) is outbound/internal from a supervised user, so it's reviewable. Mail2 (User1→external) is outbound from a supervised user, so it's reviewable. Mail3 (external→User2) is inbound to an unsupervised user and not covered. User3 is the designated reviewer.

Question 156

You have a Microsoft 365 E5 subscription. You need to export the details of a retention label. The export must include the following information: • Is record • Is regulatory • Disposition type What should you do?

A. From the Microsoft Purview compliance portal, export Compliance Manager assessment actions.
B. From the Microsoft Purview compliance portal export a file plan.
C. From the Microsoft Purview compliance portal, export a disposition review.
D. From PowerShell, run the Export-ActivityExplorerData cmdlet.
E. From PowerShell, run the Get-RetentionEvent cmdlet.
Show Answer
Correct Answer: B
Explanation:
Exporting a file plan from the Microsoft Purview compliance portal includes retention label metadata such as whether the label is a record or regulatory record, and disposition settings including disposition type. The other options relate to compliance assessments, disposition reviews, activity data, or retention events rather than exporting retention label definitions.

$19

Get all 318 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.

Full SC-400 study guide →