SC-401 Free Practice Questions

Question 1

You have a Microsoft 365 E5 subscription that uses Microsoft Purview data loss prevention (DLP) policies. You need to identify which users uploaded confidential files to external websites. The solution must minimize administrative effort. What should you use in the Microsoft Purview portal?

Question 2

You have a Microsoft 365 E5 subscription. You need to apply data loss prevention (DLP) policies to the following: • Microsoft Exchange Online mailboxes • Microsoft SharePoint Online sites • Microsoft 365 Copilot • Microsoft OneDrive accounts • On-premises repositories What is the minimum number of DLP policies required to achieve the goal?

Question 3

You need to be alerted when users share sensitive documents from Microsoft OneDrive to any users outside your company. What should you do?

Question 4

HOTSPOT You have a Microsoft 365 E5 subscription that contains four Microsoft SharePoint Online sites named Site1, Site2, Site3, and Site4. You have the retention policies shown in the following table. You have the documents shown in the following table. User1 moves Doc3 to Site4. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 5

HOTSPOT You have a Microsoft 365 subscription. You have the sensitive files shown in the following tables. You have an Endpoint data loss prevention (Endpoint DLP) policy that contains the actions shown in the Actions exhibit. (Click the Actions tab.) The status of the Endpoint DLP policy is shown in the Status exhibit. (Click the Status tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 6

HOTSPOT You have a Microsoft 365 subscription. You configure encrypted email for the subscription. You need to ensure that recipients of encrypted emails sign in to the message encryption portal to access the content of the emails. The solution must ensure that they sign in by using a Microsoft Entra account or a federated account. How should you complete the PowerShell command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 7

You have a Microsoft 365 subscription that uses Microsoft Purview Insider Risk Management. The subscription has a policy named Policy1 that detects potential insider risks based on exfiltration activities. You discover multiple high-severity alerts for Policy1. When you review the alerts, you discover that the activities that triggered alerts have a low-risk score. You need to ensure that you only receive high-severity alerts for activities that have a high-risk score. What should you modify in Policy1?

Question 8

HOTSPOT You have a Microsoft 365 E5 subscription that contains two Microsoft SharePoint Online sites named Site1 and Site2. Site1 contains the files shown in the following table. Site2 contains the files shown in the following table. From the Microsoft Purview portal, you create the content searches shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 9

You have a Microsoft 365 tenant that uses Microsoft Purview Information Protection. You create a sensitivity label named Sensitivity1 and configure Sensitivity1 to encrypt files and emails. You publish Sensitivity1. You discover that users are NOT prompted to apply Sensitivity1 to their files and email. You need to ensure that the users must apply Sensitivity1 to their files and email before saving the files or sending the emails. The solution must meet the following requirements: • Prevent users from removing the label from the files and emails. • Minimize administrative effort. What should you do?

Question 10

Your company manufactures parts that are each assigned a unique 12-character alphanumeric serial number. Emails between the company and its customers reference the serial number. You need to ensure that only Microsoft Exchange Online emails containing the serial numbers are retained for five years. Which three objects should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.