Updated Oct 23, 2021 Verified SC-400 dumps Q&As - 100% Pass [Q14-Q34]

Share

Updated Oct 23, 2021 Verified SC-400 dumps Q&As - 100% Pass

New 2021 Latest Questions SC-400 Dumps - Use Updated Microsoft Exam


Microsoft SC-400 Exam Syllabus Topics:

TopicDetails
Topic 1
  • Configure and manage sensitivity label policies
  • Implement Office 365 Advanced Message Encryption
Topic 2
  • Identify roles and permissions for administering sensitivity labels
  • Select a sensitive information type based on an organization's requirements
Topic 3
  • Create and manage custom sensitive information types
  • Apply sensitivity labels to Microsoft Teams, Microsoft 365 groups, and SharePoint sites
Topic 4
  • Configure policies for Microsoft Teams chat and channel messages
  • Manage permissions for data loss prevention reports
Topic 5
  • Manage and monitor data loss prevention policies and activities
  • Implement and monitor Microsoft Endpoint data loss prevention
Topic 6
  • Manage protection settings and marking for applied sensitivity labels
  • Create custom sensitive information types with exact data match
Topic 7
  • Configure policies in Microsoft Cloud App Security (MCAS)
  • Implement data loss prevention policies in test mode
Topic 8
  • Manage data loss prevention violations in Microsoft Cloud App Security (MCAS)
  • Create and configure data loss prevention policies
Topic 9
  • Manage and respond to data loss prevention policy violations
  • Configure data loss prevention for policy precedence
Topic 10
  • Define requirements for implementing Office 365 Message Encryption
  • Verify a trainable classifier is performing properly

 

NEW QUESTION 14
While creating a retention label, you discover that the following options are missing:
* Mark items as a record
* Mark items are a regular record
You need to ensure that the options are available when you create label in the Microsoft 365 compliance center.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

 

NEW QUESTION 15
You have a Microsoft 365 tenant.
A retention hold is applied to all the mailboxes in Microsoft Exchange Online.
A user named User1 leaves your company, and the account of User1 is deleted from Azure Active Directory (Azure AD).
You need to create a new user named User2 and provide User2 with access to the mailbox of User1.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbox?view=o365-worldwide

 

NEW QUESTION 16
You have a Microsoft 365 tenant that contains the users shown in the following table.

You configure a retention label to trigger a disposition review at the end of the retention period.
Which users can access the Disposition tab in the Microsoft 365 compliance center to review the content?

  • A. User3 and User4
  • B. User1 and User3
  • C. User3 only
  • D. User2 only
  • E. User1 only

Answer: C

Explanation:
Reference:
D18912E1457D5D1DDCBD40AB3BF70D5D
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/permissions-in-the-security-andcompliance-center?view=o365-worldwide

 

NEW QUESTION 17
You create a sensitivity label as shown in the Sensitivity Label exhibit.

You create an auto-labeling policy as shown in the Auto Labeling Policy exhibit.

A user sends the following email:
From: [email protected]
To: [email protected]
Subject: Address List
Message Body:
Here are the lists that you requested.
Attachments:
<<File1.docx>>
<<File2.xml>>
Both attachments contain lists of IP addresses.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

 

NEW QUESTION 18
You need to recommend a solution that meets the compliance requirements for viewing DLP tooltip justifications.
What should you recommend?

  • A. Configure an Azure logic app to route DLP notification emails to the compliance department.
  • B. Configure a Microsoft Power Automate workflow to route DLP notification emails to the compliance department.
  • C. Instruct the compliance department users to review the False positive and override report.
  • D. Instruct the compliance department users to review the DLP incidents report.

Answer: C

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/view-the-dlp-reports?view=o365-worldwide

 

NEW QUESTION 19
You have a Microsoft 365 tenant that uses 100 data loss prevention (DLP) policies.
A Microsoft Exchange administrator frequently investigates emails that were blocked due to DLP policy violations.
You need to recommend which DLP report the Exchange administrator can use to identify how many messages were blocked based on each DLP policy.
Which report should you recommend?

  • A. DLP incidents
  • B. False positive and override
  • C. Third-party DLP policy matches
  • D. DLP policy matches

Answer: D

 

NEW QUESTION 20
You create a data loss prevention (DLP) policy. The Advanced DLP rules page is shown in the Rules exhibit.

The Review your settings page is shown in the review exhibit.

You need to review the potential impact of enabling the policy without applying the actions.
What should you do?

  • A. Edit the policy, remove the Restrict access to the content and Send incident report to Administrator actions, and then select Yes, turn it on right away.
  • B. Edit the policy, and then select I'd like to test it out first.
  • C. Edit the policy, remove all the actions in DLP rule 1, and select I'd like to test it out first.
  • D. Edit the policy, remove all the actions in DLP rule 1, and select Yes, turn it on right away.

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-dlp-policy-from-a-template?view=o365-worldwide

 

NEW QUESTION 21
You have the retention label policy shown in the Policy exhibit. (Click the Policy tab.)

Users apply the retention label policy to files and set the asset ID as shown in the following table.

On December 1. 2020. you create the event shown in the Event exhibit. (Click the Event tab.):

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

 

NEW QUESTION 22
You need to recommend a solution that meets the sales requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

 

NEW QUESTION 23
You plan to implement a sensitive information type based on a trainable classifier. The sensitive information type will identify employment contracts.
You need to copy the required files to Microsoft SharePoint Online folders to train the classifier.
What should you use to seed content and test the classifier? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:
Table Description automatically generated

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide

 

NEW QUESTION 24
You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).
You have computers that run Windows 10 and have Microsoft 365 Apps installed. The computers are joined to Azure Active Directory (Azure AD).
You need to ensure that Endpoint DLP policies can protect content on the computers.
Solution: You enroll the computers in Microsoft intune.
Does this meet the goal?

  • A. No
  • B. Yes

Answer: A

 

NEW QUESTION 25
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).
You have computers that run Windows 10 and have Microsoft 365 Apps installed. The computers are joined to Azure Active Directory (Azure AD).
You need to ensure that Endpoint DLP policies can protect content on the computers.
Solution: You onboard the computers to Microsoft Defender for Endpoint.
Does this meet the goal?

  • A. No
  • B. Yes

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started?view=o365-worldwide

 

NEW QUESTION 26
You have a Microsoft 365 tenant that uses the following sensitivity labels:
* Confidential
* Internal
* External
The labels are published by using a label policy named Policy1.
Users report that Microsoft Office for the wen apps do not display the Sensitivity button. The Sensitivity button appears in Microsoft 365 Apps that are installed locally.
You need to ensure that the users can apply sensitivity labels to content when they use Office for the web apps.
Solution: You modify the scope of the Confidential label.
Does this meet the goal?

  • A. No
  • B. Yes

Answer: A

 

NEW QUESTION 27
You create a retention policy as shown in the following exhibit.

A user named User1 deletes a file named File1.docx from a Microsoft SharePoint Online site named Site1.
A user named User2 deletes an email and empties the Deleted Items folder in Microsoft Outlook.
Where is the content retained one year after deletion? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide

 

NEW QUESTION 28
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 tenant and 500 computers that run Windows 10. The computers are onboarded to the Microsoft 365 compliance center.
You discover that a third-party application named Tailspin_scanner.exe accessed protected sensitive information on multiple computers. Tailspin_scanner.exe is installed locally on the computers.
You need to block Tailspin_scanner.exe from accessing sensitive documents without preventing the application from accessing other documents.
Solution: From the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings, you add a folder path to the file path exclusions.
Does this meet the goal?

  • A. No
  • B. Yes

Answer: A

Explanation:
Folder path to the file path exclusions excludes certain paths and files from DLP monitoring.
Use the unallowed apps list instead.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-using?view=o365-worldwide

 

NEW QUESTION 29
You have a Microsoft 365 tenant that uses trainable classifiers.
You are creating a custom trainable classifier.
You collect 300 sample file types from various geographical locations to use as seed content. Some of the file samples are encrypted.
You organize the files into categories as shown in the following table.

Which file categories can be used as seed content?

  • A. Category4 and Category5 only
  • B. Category4 and Category6 only
  • C. Category2. Category3. and Category5 only
  • D. Category1 and Category3 only

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide
https://docs.microsoft.com/en-us/sharepoint/technical-reference/default-crawled-file-name-extensions-andparsed

 

NEW QUESTION 30
You are configuring a retention label named Label1 as shown in the following exhibit.

You need to ensure that documents that have Label1 applied are deleted three years after the end of your company's fiscal year.
What should you do?

  • A. Create a new event type.
  • B. Select Only delete items when they reach a certain age.
  • C. Set At the ends of the retention period to Trigger a disposition review.
  • D. Modify the Retention period setting.

Answer: A

Explanation:
Explanation
https://docs.microsoft.com/en-us/microsoft-365/compliance/event-driven-retention?view=o365-worldwide

 

NEW QUESTION 31
You have a Microsoft 365 tenant that uses Microsoft Teams.
You create a data loss prevention (DLP) policy to prevent Microsoft Teams users from sharing sensitive information.
You need to identify which locations must be selected to meet the following requirements:
* Documents that contain sensitive information must not be shared inappropriately in Microsoft Teams.
* If a user attempts to share sensitive information during a Microsoft Teams chat session, the message must be deleted immediately.
Which three locations should you select? To answer, select the appropriate locations in the answer area.
(Choose three.)
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-microsoft-teams?view=o365-worldwide

 

NEW QUESTION 32
A user reports that she can no longer access a Microsoft Excel file named Northwind Customer Data.xlsx.
From the Cloud App Security portal, you discover the alert shown in the exhibit.

You restore the file from quarantine.
You need to prevent files that match the policy from being quarantined. Files that match the policy must generate an alert.
What should you do?

  • A. Exclude file matching by using a regular expression.
  • B. Assign the Global reader role to the file owners.
  • C. Update the governance action.
  • D. Modify the policy template.

Answer: C

Explanation:
Reference:
https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies#create-a-new-file-policy

 

NEW QUESTION 33
You have a Microsoft 365 E5 tenant.
Data loss prevention (DLP) policies are applied to Exchange email, SharePoint sites, and OneDrive accounts locations.
You need to use PowerShell to retrieve a summary of the DLP rule matches from the last seven days.
Which PowerShell module and cmdlet should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/powershell/module/exchange/get-dlpdetectionsreport?view=exchange-ps

 

NEW QUESTION 34
......

Latest SC-400 Exam Dumps Microsoft Exam from Training: https://www.examcost.com/SC-400-practice-exam.html

Pass Microsoft SC-400 PDF Dumps Recently Updated 125 Questions: https://drive.google.com/open?id=1L766-mJ9LXfqocKBDf-UE_UsDKiEYBfn