Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 (page: 10)

Updated On: 19-Oct-2026
View Related Case Study

You have a Microsoft 365 E5 subscription that contains four users named User1, User2, User3, and User4 and a file named File1.docx. File1 has a sensitivity label applied. The label is configured as shown in the following table.

Which users can summarize File1 by using Microsoft 365 Copilot?

  1. User1 only
  2. User1 and User2 only
  3. User1, User2, and User3 only
  4. User1, User2, User3, and User4

Answer(s): B

Explanation:

To summarize a file with a sensitivity label using Microsoft 365 Copilot, a user needs the EXTRACT and VIEW
usage rights, especially if the sensitivity label applies encryption, according to Microsoft Learn. These rights are necessary for Copilot to access and process the content of the file, according to Microsoft Learn. If the user doesn't have these rights, Copilot won't be able to summarize the file.
* User1 - Yes
An owner has EXTRACT and VIEW usage rights.
* User2 - Yes
A user with Editor permissions can summarize a file with a sensitivity label using Microsoft 365 Copilot, but only if the sensitivity label grants the necessary usage rights, specifically the "EXTRACT" right, to the user. If the sensitivity label restricts the "EXTRACT" right, Copilot will not be able to summarize the file.
* User3 - No
A Restricted Editor in Microsoft 365 Copilot cannot summarize a file with a sensitivity label that restricts access.
Microsoft 365 Copilot respects sensitivity labels and will not process files if the user doesn't have the necessary permissions (like EXTRACT and VIEW). If a user only has VIEW rights, Copilot will provide a reference link to the file instead of summarizing it.
* User4 - No


Reference:

https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-architecture-data-protection-auditi ng



View Related Case Study

You have a Microsoft 365 E5 tenant that uses a domain named contoso.com.
A user named User1 sends link-based, branded emails that are encrypted by using Microsoft Purview
Advanced Message Encryption to the recipients shown in the following table.

For which recipients can User1 revoke the emails?

  1. Recipient1 only
  2. Recipient4 only
  3. Recipient1 and Recipient2 only
  4. Recipient3 and Recipient4 only
  5. Recipient1, Recipient2, Recipient3, and Recipient4

Answer(s): B


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/revoke-ome-encrypted-mail



View Related Case Study

You have a Microsoft 365 E5 subscription.
You need to ensure that encrypted email messages sent to an external recipient can be revoked or will expire within seven days.
What should you configure first?

  1. a custom branding template
  2. a mail flow rule
  3. a sensitivity label
  4. a Conditional Access policy

Answer(s): C

Explanation:

To ensure that encrypted email messages sent to external recipients can be revoked or expire within seven days, you need to configure a sensitivity label with encryption settings in Microsoft Purview Information
Protection. A sensitivity label allows you to encrypt emails and documents, set expiration policies (e.g., emails expire after 7 days), and enable email revocation
How to configure it?
● Go to Microsoft Purview compliance portal → Information Protection
● Create a sensitivity label
● Enable encryption and configure the content expiration policy
● Publish the label to users



View Related Case Study

You have a Microsoft 365 E5 subscription that uses Microsoft Teams.
You plan to implement sensitivity labels.
You need to ensure that you can view and apply sensitivity labels to new Microsoft Teams sites.
What should you do first?

  1. Run the Set-SPOSite cmdlet.
  2. Create a new sensitivity label scoped to Groups & sites.
  3. Configure the EnableMIPLabels setting in Microsoft Entra ID.
  4. Run the Execute-AzureAdLabelSync cmdlet.

Answer(s): C



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You are implementing Microsoft Purview Advanced Message Encryption for a Microsoft 365 tenant named contoso.com.
You need to meet the following requirements:
● All email to a domain named fabrikam.com must be encrypted automatically.
● Encrypted emails must expire seven days after they are sent.
What should you configure for each requirement? To answer, select the appropriate options in the answer area.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: A mail flow rule in Exchange admin center
All email to a domain named fabrikam.com must be encrypted automatically.
To automatically encrypt all emails sent to a specific domain with Microsoft Purview Advanced Message
Encryption, an administrator must first configure a sensitivity label with the desired encryption settings and then create an Exchange mail flow rule (also called a transport rule) in the Microsoft Purview portal to apply that sensitivity label to messages meeting the condition of being sent to the target domain.
How it works
When a user sends an email to any address within the targeted domain, the mail flow rule will trigger. It will then automatically apply the configured sensitivity label to the message, which in turn applies the associated encryption settings before the email is sent.
Note: You can create a mail flow rule in the Exchange admin center (EAC) by navigating to the "Mail flow" >
"Rules" section, and then using a template, copying an existing rule, or starting a new rule from scratch. You can define conditions, exceptions, and actions for your rule within the rule creation wizard to control how messages are processed.
Box 2: A custom branded template in Microsoft Exchange Online PowerShell
Encrypted emails must expire seven days after they are sent.
You can use message expiration on emails that your users send to external recipients who use the OME Portal to access encrypted emails. You force recipients to use the OME portal to view and reply to encrypted emails sent by your organization by using a *custom branded template* that specifies an expiration date in
PowerShell.
Note: Create a custom branding template to force mail expiration by using PowerShell
1. Using a work or school account that has sufficient permissions in your organization, such as Compliance
Administrator, start a Windows PowerShell session and connect to Exchange Online. For instructions, see
Connect to Exchange Online PowerShell.
2. Run the New-OMEConfiguration cmdlet.
New-OMEConfiguration -Identity "Expire in 7 days" -ExternalMailExpiryInDays 7
Where:
Identity is the name of the custom template.
ExternalMailExpiryInDays identifies the number of days that recipients can keep mail before it expires. You can use any value between 1–730 days.


Reference:

https://learn.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/manage-mail-flow-rules https://learn.microsoft.com/en-us/purview/ome-advanced-expiration



Viewing page 10 of 60
Viewing questions 46 - 50 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!