Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 (page: 3)

Updated On: 19-Oct-2026
View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that contains three DOCX files named File1, File2, and File3.
You create the sensitivity labels shown in the following table.

You apply the labels to the files as shown in the following table.

You ask Microsoft 365 Copilot to summarize the files, and you receive the results shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Summary1 is based on File1 and File3. File3 has Label2 applied, and Label2 has content marking enabled,
meaning the label persists in derived content. Since File3 contributes to Summary1, Summary1 inherits the sensitivity label from File3.
Summary2 is based on File2, which has Label1 applied. Label1 grants viewer permissions to authenticated users, but content marking is disabled. Since the label still applies to the content, Summary2 inherits Label1.
Summary3 is based on File1, File2, and File3. File2 has Label1 applied, and File3 has Label2 applied, meaning the summary will inherit at least one of these labels. Since at least one labeled file is used, the summary inherits a sensitivity label.



View Related Case Study

You have a Microsoft 365 E5 subscription.
You need to create a sensitivity label named Label1. The solution must ensure that users can use Microsoft
365 Copilot to summarize files that have Label1 applied.
Which permission should you select for Label1?

  1. Export content(EXPORT)
  2. Copy and extract content(EXTRACT)
  3. Edit content(DOCEDIT)
  4. View rights(VIEW)

Answer(s): B

Explanation:

To allow Microsoft 365 Copilot to summarize files that have Label1 applied, the label must grant permission to extract content from the document. The correct permission for this is Copy and extract content (EXTRACT).
Microsoft 365 Copilot requires access to read and process content in documents to generate summaries. The
EXTRACT permission allows users (and AI tools like Copilot) to copy and extract content for processing while still maintaining the protection applied by the sensitivity label.



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 sensitivity label that is published to all the users in your Microsoft Entra tenant as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Statement 1 - No. The sensitivity label includes content marking (watermark: INTERNAL), but it only applies to documents where the label is manually or automatically applied, not to all documents by default.
Statement 2 - No. The sensitivity label only specifies a watermark, not a header. If a header marking was configured, it would explicitly appear in the label settings.
Statement 3 - No. There is no indication that auto-labeling is configured to apply the label only to documents with the word "rebranding". Auto-labeling is an optional setting that needs explicit configuration.



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a new Microsoft 365 E5 tenant.
You need to create a custom trainable classifier that will detect product order forms. The solution must use the principle of least privilege.
What should you do first? To answer, select the appropriate options in the answer area.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




To create a custom trainable classifier in Microsoft Purview (formerly Microsoft Compliance Center), you must first opt into the trainable classifier feature.
Before using custom trainable classifiers, Microsoft requires manual opt-in through the Microsoft Purview compliance portal. Without this step, you cannot create a new classifier.
The Compliance Administrator role has the necessary permissions to configure data classification, DLP
policies, and trainable classifiers. Global Administrator has higher privileges but is not required for this task,
violating the principle of least privilege. Security Administrator is focused on security-related settings but does not manage compliance features like classifiers.



View Related Case Study

You have a Microsoft 365 tenant.
You create the following:
▪ A sensitivity label
▪ An auto-labeling policy
You need to ensure that the sensitivity label is applied to all the data discovered by the auto-labeling policy.
What should you do first?

  1. Run the Enable-TransportRule cmdlet.
  2. Enable insider risk management.
  3. Create a trainable classifier
  4. Run the policy in simulation mode.

Answer(s): D


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically



Viewing page 3 of 60
Viewing questions 11 - 15 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!