support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Microsoft
  4. SC-401

Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 (page: 11)

Updated On: 19-Oct-2026
Page 11 of 60
PDF with 291 Questions
View Related Case Study

You have a Microsoft 365 subscription that contains two Microsoft SharePoint Online sites named Site1 and
Site2.
You plan to use policies to meet the following requirements:
▪ Add a watermark of Confidential to a document if the document contains the words Project1 or Project2.
▪ Retain a document for seven years if the document contains credit card information.
▪ Add a watermark of Internal Use Only to all the documents stored on Site2.
▪ Add a watermark of Confidential to all the documents stored on Site1.
You need to recommend the minimum number of sensitive info types required.
How many sensitive info types should you recommend?

  1. 1
  2. 2
  3. 3
  4. 4

Answer(s): C

Explanation:

(1) Add a watermark of Confidential to a document if the document contains the words Project1 or Project2.
(2 - Retention) Retain a document for seven years if the document contains credit card information.
(3) Add a watermark of Internal Use Only to all the documents stored on Site2.
(1 the same can be used) Add a watermark of Confidential to all the documents stored on Site1.


Reference:

https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-learn-about



View Related Case Study

SIMULATION
Username and password
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and select the username below.
To enter your password, place your cursor in the Enter password box and select the password below.
Microsoft 365 Username:
admin@WWLx971455.onmicrosoft.com
Microsoft 365 Password: XXXXXXXXX
If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL “https://admin microsoft.com”, and press Enter.
The following information is for technical support purposes only:
Lab Instance: XXXXXXXX.
Task 2
You discover that all users can apply the Confidential – Finance label.
You need to ensure that the Confidential – Finance label is available only to the members of the Leadership group.

  1. See Explanation section for answer.

Answer(s): A

Explanation:

See explanation below.


Assign sensitivity labels to Microsoft 365 groups in Microsoft Entra ID
Microsoft Entra ID supports applying sensitivity labels published by the Microsoft Purview compliance portal to
Microsoft 365 groups. Sensitivity labels apply to groups across services like Outlook, Microsoft Teams, and
SharePoint.
Assign a label to an existing group in the Microsoft Entra admin center
Step 1: Sign in to the Microsoft Entra admin center as at least a Global Administrator.
Step 2: Select Microsoft Entra ID.
Step 3: Select Groups
Step 4: From the All groups page, select the group that you want to label.
Step 5: On the selected group's page, select Properties and select a sensitivity label from the list.
Select the Confidential - Finance label

Step 6: Select Save to save your changes.


Reference:

https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that contains the data loss prevention (DLP) policies shown in the following table.

You have a custom employee information form named Template1.docx.
You plan to create a sensitive info type named Sensitive1 that will use the document fingerprint from
Template1.docx.
What should you use to create Sensitive1, and in which DLP policies can you use Sensitive1? To answer,
select the appropriate options in the answer area.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: Microsoft Purview portal
Create Sensitive1 by using:
Document fingerprinting
Compliance portal example of a patent document matching a document fingerprint of a patent template
1. In the Microsoft Purview compliance portal, select Data classification and then choose Classifiers.
2. On the Classifiers page, choose Sensitive info types > Create Fingerprint based SIT.
3. Enter a name and description for your new SIT.
4. Upload the file you wish to use as the fingerprint template.
5. OPTIONAL: Adjust the requirements for each confidence level and then choose Next. For more information,
see Partial matching and Exact matching.
6. Review your settings > Create.
7.
When the confirmation page displays, choose Done.
Box 2: DLP1, DLP2, and DLP3
Use Sensitive1 in:
DLP can use document fingerprinting as a detection method in Exchange, SharePoint, OneDrive, Teams, and
Devices.


Reference:

https://learn.microsoft.com/en-us/purview/sit-document-fingerprinting



View Related Case Study

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.
You need to ensure that you receive an alert when a user uploads a document to a third-party cloud storage service.
What should you use?

  1. an insider risk policy
  2. a file policy
  3. a sensitivity label
  4. an activity policy

Answer(s): B

Explanation:

The following are examples of file policies that can be created:
* Publicly shared files - Receive an alert about any file in your cloud that is publicly shared by selecting all files whose sharing level is public.
* Etc.
Note 1, example: Detect and protect GDPR related data across file storage apps.
Detect files that are shared in cloud storage apps and contain personally identifying information and other sensitive data that are bound by a GDPR compliance policy. Then, automatically apply sensitivity labels to limit access only to authorized personnel.
1. In the Microsoft 365 Defender portal, under Cloud Apps, go to Policies -> Policy management. Create a new
File policy.
2. Under Inspection method, select Data Classification Service (DCS), and under Select type select one or more information types that comply with the GDPR compliance, for example: EU debit card number, EU drivers license number, EU national/regional identification number, EU passport number, EU SSN, SU tax identification number.
3. Set the Governance actions to be taken on files when a violation is detected, by selecting Apply sensitivity label for each supported app.
4. Create the file policy.
Note 2: File policies in Microsoft Defender for Cloud Apps
File Policies allow you to enforce a wide range of automated processes using the cloud provider's APIs.
Policies can be set to provide continuous compliance scans, legal eDiscovery tasks, DLP for sensitive content shared publicly, and many more use cases. Defender for Cloud Apps can monitor any file type based on more than 20 metadata filters (for example, access level, file type).


Reference:

https://learn.microsoft.com/en-us/defender-cloud-apps/data-protection-policies https://learn.microsoft.com/en-us/defender-cloud-apps/policies-information-protection



View Related Case Study

You receive an email that contains a list of words that will be used for a sensitive information type.
You need to create a file that can be used as the source of a keyword dictionary.
In which format should you save the list?

  1. an ACCDB database file that contains a table named Dictionary
  2. a TSV file that contains words separated by tabs
  3. a CSV file that contains words separated by commas
  4. an XLSX file that contains one word in each cell of the first row

Answer(s): C

Explanation:

Correct:
* a CSV file that contains words separated by commas
* a text file that has one word on each line
Incorrect:
* an ACCDB database file that contains a table named Dictionary
* a DOCX file that has one word on each line
* a JSON file that has an element for each word
* a TSV file that contains words separated by tabs
* an XML file that contains a keyword tag for each word
* an XLSX file that contains one word in each cell of the first row
Note:
To create a keyword dictionary for a sensitive information type in Microsoft Purview Data Loss Prevention
(DLP), you must use a plain text (.txt) file (or a .CSV file) where each keyword is on a separate line.
Format Example (TXT file):
confidential sensitive classified top secret
This format is simple, efficient, and directly compatible with Microsoft 365 DLP policies for keyword dictionaries.
How to use the keyword dictionary?
Create a text file with one keyword per line.
Upload it to Microsoft Purview under Data Classification > Sensitive Info Types.
Use the dictionary in a DLP policy to identify and protect sensitive information.
In steps:
Create a keyword dictionary using the Microsoft Purview portal
Use these steps to create or import keywords for a custom dictionary:
1. Sign in to the Microsoft Purview portal Information Protection > Classifiers > Sensitive info types.
2. Select + Create sensitive info type and then enter a Name and Description for your sensitive info type.
Choose Next.
3. On the Define patterns for this sensitive info type page, choose + Create pattern.
4. In the New pattern window, select a Confidence level.
5. Choose Add a Primary element and select Keyword dictionary.
*-> 6. On the Add a keyword dictionary flyout, you can:
6a.Upload a dictionary file in TXT or CSV format.
6b. Choose from existing dictionaries.
or create a new dictionary by entering keywords manually and giving it a name.


Reference:

https://learn.microsoft.com/en-us/purview/sit-create-a-keyword-dictionary



  PDF
Viewing page 11 of 60
Viewing questions 51 - 55 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!