Microsoft

SC-400 Free Practice Questions — Page 7

Question 61

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: ********** If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 12345678 - You need to ensure that a group named U.S. Sales can store files containing information subject to General Data Protection Regulation (GDPR) in their OneDrive accounts. All other current GDPR restrictions must remain in effect. To complete this task, sign in to the appropriate admin center.

Show Answer
Correct Answer: Microsoft Purview compliance portal → Data loss prevention → Open the existing GDPR DLP policy → Edit Locations (OneDrive accounts) → Exclude the Microsoft 365 group “U.S. Sales” from the OneDrive location → Save.
Explanation:
This preserves the existing GDPR DLP policy and all other restrictions while allowing members of the specified group to store GDPR-regulated files in their OneDrive accounts by excluding that group's OneDrive locations from the policy scope.

Question 62

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: ********** If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 12345678 - You need to retain Microsoft SharePoint files that contain the word Falcon for two years from the date they were created, and then delete them. To complete this task, sign in to the appropriate admin center.

Show Answer
Correct Answer: Microsoft Purview → Data lifecycle management: Create a retention label: Retain items for 2 years based on Created date, then permanently delete. Publish an auto-apply label policy targeting SharePoint sites with a KQL/content query matching "Falcon".
Explanation:
A retention label configured to retain for 2 years from the creation date and then delete is automatically applied to SharePoint files whose content matches the keyword Falcon using an auto-apply policy.

Question 63

You have a Microsoft 365 E5 subscription that contains multiple data loss prevention (DLP) policies. You need to identify which DLP rules include conditions that can trigger the DLP policies. Which report should you use from the Microsoft Purview compliance portal?

A. DLP policy matches
B. False positives and overrides
C. DLP incidents
D. Third-party DLP policy matches
Show Answer
Correct Answer: A
Explanation:
The DLP policy matches report shows which DLP policies and their rules are being matched, allowing you to identify the rule conditions that are triggering policy evaluations. False positives and overrides focuses on user overrides and incorrect detections, DLP incidents focuses on incident records, and Third-party DLP policy matches is for third-party integrations rather than Microsoft Purview DLP rules.

Question 65

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: ********** If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 12345678 - You need to provide users with the ability to manually classify files that contain product information that are stored in SharePoint Online sites. The solution must meet the following requirements: • The users must be able to apply a classification of Product1 to the files. • Any authenticated user must be able to open files classified as Product1. • Files classified as Product1 must be encrypted. To complete this task, sign in to the appropriate admin center.

Show Answer
Correct Answer: In Microsoft Purview, create a sensitivity label named Product1 with encryption enabled, assign permissions to Any authenticated users with View access, publish the label so users can manually apply it to SharePoint files.
Explanation:
A sensitivity label provides manual classification. Enabling encryption while granting View permission to Any authenticated users allows all signed-in users to open the files without broader edit permissions.

Question 66

You have a Microsoft 365 E5 subscription that uses Privacy risk management. You need to recommend which type of policy can evaluate the external sharing of personal data on Microsoft SharePoint Online sites. Which policy type should you recommend?

A. Data overexposure
B. Data transfers
C. Data theft by departing users
D. Data minimization
E. Security policy violations
Show Answer
Correct Answer: B
Explanation:
The correct policy type is Data transfers. In Microsoft Priva Privacy Risk Management, Data transfer policies detect and evaluate transfers of personal data, including external sharing from SharePoint Online and OneDrive, such as sharing files or sites with people outside the organization. The other policy types target different risks (overexposure, departing users, minimization, or security policy violations).

Question 67

HOTSPOT - You have a Microsoft 365 E5 tenant that contains two users named User1 and User2 and a Microsoft SharePoint Online site named Site1 as shown in the following exhibit. For Site1, the users are assigned the roles shown in the following table. You publish a retention label named Retention1 to Site1. To which files can the users apply Retention1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for SC-400 question 67 Illustration for SC-400 question 67 Illustration for SC-400 question 67
Show Answer
Correct Answer: User1: File1.docx, File2.docx, and File3.docx User2: File1.docx, File2.docx, and File3.docx
Explanation:
Publishing a retention label to a SharePoint site makes it available to users with edit permissions on supported files. Site Owners and Members can apply the published retention label. The DLP warning/block icons shown do not prevent applying a retention label.

Question 68

SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: Microsoft 365 Password: ********** If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 12345678 - You discover that all users can apply the Confidential - Finance label. You need to ensure that the Confidential - Finance label is available only to the members of the Finance Team group. To complete this task, sign in to the appropriate admin center.

Show Answer
Correct Answer: Microsoft Purview compliance portal Information protection → Label policies Edit the policy that publishes "Confidential - Finance" Change Users and groups to only the "Finance Team" group Save and publish the policy.
Explanation:
Sensitivity label availability is controlled by label publishing policies, not by the label itself. Restrict the publishing policy scope so only the Finance Team group receives the Confidential - Finance label.

Question 69

HOTSPOT - You have a Microsoft 365 E5 subscription. You need to implement a compliance solution that meets the following requirements: • Captures clips of key security-related user activities, such as the exfiltration of sensitive company data. • Integrates data loss prevention (DLP) capabilities with insider risk management. What should you use for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for SC-400 question 69
Show Answer
Correct Answer: Captures clips of key security-related user activities: Forensic evidence Integrates DLP capabilities with insider risk management: Adaptive Protection
Explanation:
Forensic evidence captures activity clips and evidence for insider risk investigations. Adaptive Protection integrates Insider Risk Management signals with DLP and other controls to dynamically adjust protection.

Question 70

HOTSPOT - You have a Microsoft 365 E5 subscription that contains the administrators shown in the following table. On August 1, 2023, you apply the communication compliance policies shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Illustration for SC-400 question 70 Illustration for SC-400 question 70 Illustration for SC-400 question 70
Show Answer
Correct Answer: Yes Yes Yes
Explanation:
Investigators can review policy results, Communication Compliance Administrators can review/manage policies, and after the first 24-hour evaluation cycle the created policies have results available at the stated times.

Question 71

You have a Microsoft 365 E3 subscription. You plan to assess compliance with ISO/IEC 27001:2013. From Compliance Manager, you discover that the ISO/IEC 27001:2013 regulatory template for Microsoft 365 is inactive. What should you do?

A. Purchase a Microsoft 365 E5 subscription.
B. Add a data connector.
C. Add recommended assessments.
D. Create a trainable classifier.
Show Answer
Correct Answer: A
Explanation:
The ISO/IEC 27001:2013 regulatory template is a premium Compliance Manager assessment. With Microsoft 365 E3, premium regulatory templates are not included, so the template appears inactive or unavailable. Upgrading to a licensing level that includes Compliance Manager premium assessments (such as Microsoft 365 E5) enables access. Adding recommended assessments, data connectors, or trainable classifiers does not grant access to premium regulatory templates.

$19

Get all 318 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.