SC-400 Microsoft Information Protection Administrator - Practice Questions

Question 4 (Mixed Questions)

Your company manufactures parts that are each assigned a unique 12-character alphanumeric serial number. Emails between the company and its customers reference the serial number.

You need to ensure that only Microsoft Exchange Online emails containing the serial numbers are retained for five years.

Which three objects should you create? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

○
a sensitivity label
○
a retention policy
○
an auto-labeling policy
○
a trainable classifier
○
a sensitive info type
○
a retention label
○
a data loss prevention (DLP) policy

Reference / correct answer:

an auto-labeling policy

a sensitive info type

a retention label

C: One of the most powerful features of retention labels is the ability to apply them automatically to content that matches specified conditions.

F: You can apply retention labels to content automatically when that content contains:

Specific types of sensitive information

Specific keywords or searchable properties that match a query you create

A match for trainable classifiers

E: Sensitive information types are pattern-based classifiers. They detect sensitive information like social security, credit card, or bank account numbers to identify sensitive items. Custom sensitive information types use regular expressions, keywords, and keyword dictionaries.

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitive-information-type-learn-about?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide

Question 5 (Mixed Questions)

Your company has a Microsoft 365 tenant that uses a domain named contoso.com.

You are implementing data loss prevention (DLP).

The company's default browser is Microsoft Edge.

During a recent audit, you discover that some users use Firefox and Google Chrome browsers to upload files labeled as Confidential to a third-party Microsoft SharePoint Online site that has a URL of https://m365x076709.sharepoint.com. Users are blocked from uploading the confidential files to the site from Microsoft Edge.

You need to ensure that the users cannot upload files labeled as Confidential from Firefox and Google Chrome to any cloud services. Which two actions should you perform? Each correct answer presents part of the solution. (Choose two.)

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

○
From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add m365x076709.sharepoint.com as a blocked service domain.
○
Create a DLP policy that applies to the Devices location.
○
From the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings, add Firefox and Google Chrome to the unallowed browsers list.
○
From the Microsoft 365 compliance center, onboard the devices.
○
From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add contoso.com as an allowed service domain.

Question 6 (Mixed Questions)

You need to automatically apply a sensitivity label to documents that contain information about your company's network including computer names, IP addresses, and configuration information. Which two objects should you use? Each correct answer presents part of the solution. (Choose two.)

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

○
an Information protection auto-labeling policy
○
a custom trainable classifier
○
a sensitive info type that uses a regular expression
○
a data loss prevention (DLP) policy
○
a sensitive info type that uses keywords
○
a sensitivity label that has auto-labeling

SC-400 – Microsoft Information Protection Administrator