Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 (page: 2)

Updated On: 17-Oct-2026
View Related Case Study

DRAG DROP (Drag and Drop is not supported)
You need to meet the technical requirements for the Site1 documents.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:






The goal is to automatically label documents in Site1 that contain credit card numbers. To achieve this, we need a sensitivity label with an auto-labeling policy based on a sensitive info type that detects credit card numbers.
Step 1: Create a Sensitive Info Type
● A sensitive info type is needed to detect credit card numbers in documents.
● Microsoft Purview includes built-in sensitive info types for credit card numbers, but we can also create a custom one if necessary.
Step 2: Create a Sensitivity Label
● A sensitivity label is required to classify and protect documents containing sensitive information.
● This label can apply encryption, watermarking, or access controls to credit card data.
Step 3: Create an Auto-Labeling Policy
● An auto-labeling policy ensures that the sensitivity label is applied automatically when credit card numbers are detected in Site1.
● This policy is configured to scan files and automatically apply the correct sensitivity label.



View Related Case Study

You need to meet the technical requirements for the creation of the sensitivity labels.
To which user or users must you assign the Sensitivity Label Administrator role?

  1. Admin1 only
  2. Admin1 and Admin4 only
  3. Admin1 and Admin5 only
  4. Admin1, Admin2, and Admin3 only
  5. Admin1, Admin2, Admin4, and Admin5 only

Answer(s): D

Explanation:

To meet the requirement that all administrative users must be able to create Microsoft 365 sensitivity labels, we need to assign the Sensitivity Label Administrator role to the correct users.
Sensitivity Label Administrator Role Responsibilities
This role allows users to:
● Create and manage sensitivity labels in Microsoft Purview.
● Publish and configure auto-labeling policies.
● Modify label encryption and content marking settings.
Review of Admin Roles from the Table:

Users that must be assigned the Sensitivity Label Administrator role:
● Admin2 (Compliance Data Administrator)
● Admin3 (Compliance Administrator)
● Admin1 (Global Reader) (should be assigned this role to fulfill the requirement that all admins can create labels).



View Related Case Study

You need to meet the technical requirements for the creation of the sensitivity labels.
To which user or users must you assign the Information Protection Admin role group?

  1. Admin1 only
  2. Admin1 and Admin4 only
  3. Admin1 and Admin5 only
  4. Admin1, Admin2, and Admin3 only
  5. Admin1, Admin2, Admin4, and Admin5 only

Answer(s): B

Explanation:

Scenario, Technical Requirements: All administrative users must be able to create Microsoft 365 sensitivity labels.
The administrator are setup with the following roles:
Admin1 is Global Reader.
Admin2 is Compliance Data Administrator.
Admin3 is Compliance Administrator.
Admin4 is Security Operator.
Admin5 is Security Administrator.
--
Only Admin1 (Global Reader) and Admin4 (Security Operator) need the additional Information Protection
Admin (or Sensitivity Label Administrator) role to create sensitivity labels.
Role Requirements Breakdown
To create and manage Microsoft 365 sensitivity labels in the Microsoft Purview portal, a user must be assigned a role group that explicitly contains the Sensitivity Label Administrator permission.
Microsoft Purview provides this required permission natively through several built-in role groups:
Compliance Administrator (Assigned to Admin3)
Security Administrator (Assigned to Admin5)
Compliance Data Administrator (Assigned to Admin2)
Information Protection Admins


Reference:

https://learn.microsoft.com/en-us/purview/get-started-with-sensitivity-labels



View Related Case Study

You have a Microsoft 365 E5 subscription that contains a Microsoft Teams channel named Channel1.
Channel1 contains research and development documents.
You plan to implement Microsoft 365 Copilot for the subscription.
You need to prevent the contents of files stored in Channel1 from being included in answers generated by
Copilot and shown to unauthorized users.
What should you use?

  1. data loss prevention (DLP)
  2. Microsoft Purview insider risk management
  3. Microsoft Purview Information Barriers (IBs)
  4. sensitivity labels

Answer(s): D

Explanation:

Correct:
* sensitivity labels
To prevent the contents of files stored in Channel1 from being included in Microsoft 365 Copilot responses and ensure unauthorized users cannot access them, you should use Microsoft Purview Sensitivity Labels.
Sensitivity labels allow you to classify, protect, and restrict access to sensitive files. You can configure label-based encryption and access control policies to ensure that only authorized users can access or interact with the files in Channel1. Microsoft 365 Copilot respects sensitivity labels, meaning if a file is labeled with restricted permissions, Copilot will not use it in generated responses for unauthorized users.
Incorrect:
* communication compliance policy
* data loss prevention (DLP)
* Microsoft Purview Information Barriers (IBs)
* Microsoft Purview insider risk management
Note:
To prevent unauthorized access to channel file contents via Microsoft 365 Copilot, apply sensitivity labels with
Data Loss Prevention (DLP) policies to restrict content processing. Additionally, manage channel memberships, restrict sharing links in SharePoint, and enforce external access policies.
Use sensitivity labels and DLP policies
1. Apply labels: Assign sensitivity labels like "Confidential" to sensitive documents in the channel.
2. Create DLP policies: In Microsoft Purview, configure a policy to prevent Copilot from processing content that has specific sensitivity labels. This stops Copilot from summarizing sensitive files for unauthorized users.


Reference:

https://learn.microsoft.com/en-us/purview/ai-m365-copilot-considerations



View Related Case Study

DRAG DROP (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.
You plan to deploy a Defender for Cloud Apps file policy that will be triggered when the following conditions are met:
● A file is shared externally.
● A file is labeled as internal only.
Which filter should you use for each condition? To answer, drag the appropriate filters to the correct conditions.
Each filter may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Note: Each correct selection is worth one point.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:






The "Access level" filter in Microsoft Defender for Cloud Apps helps identify how a file is shared, including whether it is shared externally outside the organization.
The "Sensitivity label" filter is used to track files that have been classified with specific Microsoft Purview sensitivity labels, such as Internal only, ensuring that files with internal classifications are properly monitored and protected.
The "Collaborators" filter tracks users who have access but does not indicate external sharing. The "Matched policy" filter identifies files based on predefined policies but does not directly filter for external sharing or sensitivity labels.



Viewing page 2 of 60
Viewing questions 6 - 10 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!