support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Microsoft
  4. SC-401

Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 Questions 66–70 (page: 15)

Updated On: 1-Oct-2026
Page 15 of 60
PDF with 291 Questions
View Related Case Study

You have a Microsoft 365 E5 subscription that contains a user named User1.
You deploy Microsoft Purview Data Security Posture Management for AI (DSPM for AI).
You need to ensure that User1 can verify the auditing status of the subscription. The solution must follow the principle of least privilege.
To which role group should you add User1?

  1. Security Reader
  2. Insider Risk Management Analysts
  3. Insider Risk Management Investigators
  4. View-Only Organization Management for Microsoft Exchange Online

Answer(s): D

Explanation:

Permissions for Data Security Posture Management for AI

Note: Roles and role groups that can view, create, and edit in Data Security Posture Management for AI:
Microsoft Entra ID Compliance Administrator role
Microsoft Entra ID Global Administrator role
Microsoft Purview Compliance Administrator role group
Roles and role groups that can view-only in Data Security Posture Management for AI:
Microsoft Purview Security Reader role group


Reference:

https://learn.microsoft.com/en-us/purview/ai-microsoft-purview-permissions



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You need to implement an information compliance policy to meet the following requirements:
-▪ Documents that contain passport numbers from the United States, Germany, Australia, and Japan must be identified automatically.
-▪ When a user attempts to send an email or an attachment that contains a passport number, the user must receive a tooltip in Microsoft Outlook.
▪ Users must be blocked from using Microsoft SharePoint Online or OneDrive for Business to share a document that contains a passport number.
What is the minimum number of sensitivity labels and auto-labeling policies you should create? To answer,
select the appropriate options in the answer area.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: 1
We have four different kind of built-in sensitive information types for United States, Germany, Australia, and
Japan in Data classification.
Box 2: 1
One Autolabeling policy can include all (4) passport sensitive information types in Rule-Conditions. In the same policy you choose one sensitivity label to add to files.


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels



View Related Case Study

You have a Microsoft 365 tenant that is opt-in for trainable classifiers.
You need to ensure that a user named User1 can create custom trainable classifiers. The solution must use the principle of least privilege.
Which role should you assign to User1?

  1. Security Administrator
  2. Compliance Administrator
  3. Global Administrator
  4. Security Operator

Answer(s): B

Explanation:

In Microsoft 365, the minimum required role to create custom trainable classifiers is Compliance Administrator.
While Global Administrator and Security Administrator roles may also have the necessary permissions, the
Compliance Administrator role is the most directly aligned with this specific task.


Reference:

https://learn.microsoft.com/en-us/purview/trainable-classifiers-get-started-with



View Related Case Study

You receive an email that contains a list of words that will be used for a sensitive information type.
You need to create a file that can be used as the source of a keyword dictionary.
In which format should you save the list?

  1. a JSON file that has an element for each word
  2. a DOCX file that has one word on each line
  3. a CSV file that contains words separated by commas
  4. an ACCDB database file that contains a table named Dictionary

Answer(s): C

Explanation:

Correct:
* a CSV file that contains words separated by commas
* a text file that has one word on each line
Incorrect:
* an ACCDB database file that contains a table named Dictionary
* a DOCX file that has one word on each line
* a JSON file that has an element for each word
* a TSV file that contains words separated by tabs
* an XML file that contains a keyword tag for each word
* an XLSX file that contains one word in each cell of the first row
Note:
To create a keyword dictionary for a sensitive information type in Microsoft Purview Data Loss Prevention
(DLP), you must use a plain text (.txt) file (or a .CSV file) where each keyword is on a separate line.
Format Example (TXT file):
confidential sensitive classified top secret
This format is simple, efficient, and directly compatible with Microsoft 365 DLP policies for keyword dictionaries.
How to use the keyword dictionary?
Create a text file with one keyword per line.
Upload it to Microsoft Purview under Data Classification > Sensitive Info Types.
Use the dictionary in a DLP policy to identify and protect sensitive information.
In steps:
Create a keyword dictionary using the Microsoft Purview portal
Use these steps to create or import keywords for a custom dictionary:
1. Sign in to the Microsoft Purview portal Information Protection > Classifiers > Sensitive info types.
2. Select + Create sensitive info type and then enter a Name and Description for your sensitive info type.
Choose Next.
3. On the Define patterns for this sensitive info type page, choose + Create pattern.
4. In the New pattern window, select a Confidence level.
5. Choose Add a Primary element and select Keyword dictionary.
*-> 6. On the Add a keyword dictionary flyout, you can:
6a. Upload a dictionary file in TXT or CSV format.
6b. Choose from existing dictionaries.
or create a new dictionary by entering keywords manually and giving it a name.


Reference:

https://learn.microsoft.com/en-us/purview/sit-create-a-keyword-dictionary



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You use project codes that have a format of three alphabetical characters that represent the project type,
followed by three digits, for example Abc123.
You need to create a new sensitive info type for the project codes.
How should you configure the regular expression to detect the content? To answer, select the appropriate options in the answer area.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://joannecklein.com/2018/08/07/build-and-use-custom-sensitive-information-types-in-office-365/



  PDF
Viewing page 15 of 60
Viewing questions 71 - 75 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!