support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Microsoft
  4. SC-401

Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 Questions 96–100 (page: 21)

Updated On: 1-Oct-2026
Page 21 of 60
PDF with 291 Questions
View Related Case Study

You have a Microsoft 365 E5 tenant that has a retention label named Label1.
You need to create an auto-labeling policy that will apply Label1.
To which location can Label1 be applied?

  1. OneDrive accounts
  2. Microsoft Entra security groups
  3. Microsoft Defender for Cloud Apps
  4. Teams chats

Answer(s): A

Explanation:

Correct:
* OneDrive accounts
Incorrect:
* Microsoft Defender for Cloud Apps
* Microsoft Entra security groups
* on-premises repositories
* Teams channel messages
* Teams chats
Note:
A Microsoft 365 auto-labeling policy can be applied to Exchange mailboxes, SharePoint sites, and OneDrive accounts. It can also be applied to content within Teams and other Microsoft 365 Groups, as well as Azure services like Azure SQL and Azure Cosmos DB.
Exchange Online: Applies to emails in transit.
SharePoint: Applies to documents stored at rest in SharePoint sites.
OneDrive: Applies to documents stored at rest in OneDrive accounts.
Teams: Applies to documents stored in the SharePoint sites associated with a Team.
Azure and other data sources: Can be extended to apply to data stored in services like Azure SQL, Azure
Cosmos DB, and more.


Reference:

https://learn.microsoft.com/en-us/purview/apply-sensitivity-label-automatically



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 365 E5 subscription.
You plan to create a new sensitive information type (SIT) by using the Microsoft Purview portal.
You need to copy and modify an existing SIT from which to create the new SIT.
What are two SITs that you can copy and modify? To answer, select the appropriate SITs in the answer area.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: All Full Names
All full names is a bundled named entity. It detects full names for people from all supported countries/regions,
which include Australia, China, Japan, U.S., and countries in the EU. Use this SIT to detect all possible matches of full names.
Note: Create custom sensitive information types in the compliance portal
If the pre-configured sensitive information types (SIT) don't meet your needs, you can create and define customized SITs that meet your needs. You can also copy and then edit a built-in SIT.
Categories of sensitive information types
Built in sensitive information types
These SITs are created by Microsoft and show up in the compliance console by default. These SITs can't be edited, but you can use them as templates by copying them to create custom sensitive information types.
Box 2: All Credential Types
"All credentials" is a bundled-entity sensitive information type (SIT). It detects credentials from all supported services and environments, which include Amazon, Azure, GitHub, Google, Microsoft general, Slack and more.
Description
The All credentials SIT is a bundled SIT that scans for individual credential types. This includes checksum evaluated values and keyword/pattern combinations. The All credential entity scans for any of the underlying credential information type checksums and/or patterns are detected in a document.
Incorrect:
* Adatum numbers
Only the built in sensitive information types, by Microsoft, can be copied.
* Adatum document patterns
Only the built in sensitive information types, by Microsoft, can be copied.
* ABA Routing Number
Format nine digits that may be in a formatted or unformatted pattern
Pattern two digits in the ranges 00-12, 21-32, 61-72, or 80
two digits an optional hyphen four digits an optional hyphen a digit
* ASP.NET machine Key
Format
Symmetric keys in XML configuration.
Pattern
Various symmetric key formats in XML, for example:
<machineKey decryptionKey="******** </br>
<machineKey validationKey="********</br>
Credential example
<machineKey validationKey="ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789"
decryptionKey="ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789"
Note
These SITs can't be copied:
Canada driver's license number
EU driver's license number
EU national identification number
EU passport number
EU social security number or equivalent identification
EU tax identification number
International classification of diseases (ICD-10-CM)
International classification of diseases (ICD-9-CM)
U.S. driver's license number


Reference:

https://learn.microsoft.com/en-us/purview/sit-create-a-custom-sensitive-information-type https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-learn-about https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-entity-definitions



View Related Case Study

You need to be alerted when users share sensitive documents from Microsoft OneDrive to any users outside your company.
What should you do?

  1. From the Microsoft Defender portal, create an activity policy.
  2. From the Microsoft Purview portal, start an Advanced eDiscovery search.
  3. From the Exchange admin center, create a data loss prevention (DLP) policy.
  4. From the Microsoft Defender portal, create a file policy.

Answer(s): A

Explanation:

Correct:
* From the Microsoft Defender portal, create an activity policy.
An activity policy in Microsoft Defender for Cloud Apps (Microsoft Defender portal) allows you to track and alert on specific user actions, such as sharing sensitive documents externally from OneDrive. This policy can detect file-sharing activities and send alerts when files are shared with external users, which meets the requirement.
Incorrect:
* From the Exchange admin center, create a data loss prevention (DLP) policy.
From the Exchange admin center you can only configure mail flow rules to detect sensitive info and apply actions like encryption or blocking, which are essentially DLP functions within Exchange.
* From the Microsoft Defender portal, create a file policy.
Is correct only if sensitive documents already have been shared.
* From the Microsoft Entra admin center, configure an Identity Protection policy.
* From the Microsoft Purview portal, create an insider risk policy.
* From the Microsoft Purview portal, start a data investigation.
* From the Microsoft Purview portal, start an Advanced eDiscovery search.


Reference:

https://learn.microsoft.com/en-us/purview/dlp-create-policy-spo-odb-external



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription.
In Microsoft Exchange Online, you have the mail flow rule shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: subject line
Outbound messages with the [Encrypt] string in the __________ of the message will be encrypted.
The mail flow rule Rule description states:
Apply this rule if
Is sent to 'Outside the organization
And includes these words in the message subject: [Encrypt]
Do the following
Rights protect message with RMS template: Do Not Forward
Box 2: restrict recipients from printing the message
The mail flow rule will ______.
Note: IRM is an encryption solution that also applies usage restrictions to email messages. It helps prevent sensitive information from being printed, forwarded, or copied by unauthorized people.
IRM capabilities in Microsoft 365 use Azure Rights Management (Azure RMS).


Reference:

https://learn.microsoft.com/en-us/purview/email-encryption



View Related Case Study

You have a Microsoft 365 E5 tenant that contains a user named User1. User1 is assigned the Compliance
Administrator role.
User1 cannot view the regular expression in the IP Address sensitive info type.
You need to ensure that User1 can view the regular expression.
What should you do?

  1. Assign User1 the Global Reader role.
  2. Assign User1 to the Reviewer role group.
  3. Create a copy of the IP Address sensitive info type and instruct User1 to edit the copy.
  4. Instruct User1 to use the Test function on the sensitive info type.

Answer(s): C

Explanation:

To allow a Compliance Administrator to view the IP Address sensitive info type's regular expression, create a copy of the built-in "IP Address" sensitive info type in the Microsoft Purview compliance portal and grant the
Compliance Administrator role access to that copied custom sensitive info type. You cannot directly edit built-in sensitive info types, but by copying it, you create a custom version that the administrator can then view and modify.
Note: Create custom sensitive information types
If the preconfigured sensitive information types (SITs) don't meet your needs, you can create and define customized SITs that meet your needs. You can also copy and then edit a built-in SIT.


Reference:

https://learn.microsoft.com/en-us/purview/sit-create-a-custom-sensitive-information-type



  PDF
Viewing page 21 of 60
Viewing questions 101 - 105 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!