support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Microsoft
  4. SC-401

Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 Questions 34–38 (page: 31)

Updated On: 1-Oct-2026
Page 31 of 60
PDF with 291 Questions
View Related Case Study

SIMULATION
Username and password
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and select the username below.
To enter your password, place your cursor in the Enter password box and select the password below.
Microsoft 365 Username:
admin@WWLx121586.onmicrosoft.com
Microsoft 365 Password: XXXXXXXXX
If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL “https://admin.microsoft.com”, and press Enter.
The following information is for technical support purposes only:
Lab Instance: XXXXXXXXX
Task 8
You need to ensure that the Employee Records retention label is applied automatically to content that meets the following requirements:
-▪ Contains only the U.K. Unique Taxpayer Reference Number sensitive info type
-▪ Is located in any Exchange email, SharePoint sites, OneDrive accounts or Microsoft 365 groups
-

  1. See Explanation section for answer.

Answer(s): A

Explanation:

See explanation below.


To configure a retention label to use a specific sensitive information type, you need to create an auto-labeling policy in the Microsoft Purview portal that applies a label to content containing that sensitive information type.
First, create the retention label itself with its retention settings, and then create the auto-labeling policy, select
"Apply label to content that contains sensitive info," choose the desired sensitive info type, specify the locations to apply it, and select your retention label.
Step 1: Sign in to the Microsoft Purview portal.
Step 2: If you're using records management [Yes!]: Solutions > Records Management > Policies > Label policies > Auto-apply a label
Step 3: Enter a name and description for this auto-labeling policy, and then select Next.
Step 4: For Choose the type of content you want to apply this label to, select one of the available conditions.
Auto-apply labels to content with specific types of sensitive information
Step 5: Select U.K. Unique Taxpayer Reference Number sensitive info type in the U.K Personally Identifiable
Information (PII) Data template.
When you create auto-apply retention label policies for sensitive information, you see the same list of policy templates as when you create a Microsoft Purview Data Loss Prevention (DLP) policy. Each template is preconfigured to look for specific types of sensitive information. In the following example, the sensitive info types are from the Privacy category, and U.S Personally Identifiable Information (PII) Data template:

Step 6: For the Assign admin units page, keep the default of Full directory. Currently, admin units aren't supported for this policy.
Step 7: For the Choose the type of retention policy to create page, select Adaptive or Static. [Select Static]
Step 8: If you chose Static: On the Choose locations page, toggle on or off any of the locations.
Select:
Exchange email
SharePoint sites
OneDrive accounts
Microsoft 365 groups

Step 9: Follow the prompts to select a retention label, whether to run the policy in simulation mode or turn it on
(if applicable for your chosen condition), and then review and submit your configuration choices.


Reference:

https://learn.microsoft.com/en-us/purview/apply-retention-labels-automatically https://learn.microsoft.com/en-us/purview/retention-settings#locations



View Related Case Study

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).
You have computers that run Windows 11 and have Microsoft 365 Apps installed. The computers are joined to a Microsoft Entra tenant.
You need to ensure that Endpoint DLP policies can protect content on the computers.
Solution: You enroll the computers in Microsoft Intune.
Does this meet the goal?

  1. Yes
  2. No

Answer(s): B

Explanation:

Correct:
* You deploy the Endpoint DLP configuration package to the computers.
* You onboard the computers to Microsoft Defender for Endpoint.
Incorrect:
* You deploy the unified labeling client to the computers.
* You enroll the computers in Microsoft Intune.
* You deploy the Microsoft Purview Information Protection client to the computers.


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-endpoints



View Related Case Study

You have a Microsoft 365 E5 tenant.
You need to add a new keyword dictionary.
What should you create?

  1. a trainable classifier
  2. a retention policy
  3. a sensitivity label
  4. a sensitive info type

Answer(s): D

Explanation:

To add a new keyword dictionary in Microsoft Purview Data Loss Prevention (DLP), you must create a
Sensitive Information Type (SIT).
Sensitive Info Types (SITs) allow you to define custom detection rules, including keyword dictionaries, regular expressions, and functions for identifying sensitive content in emails, documents, and other Microsoft 365
locations. A keyword dictionary is a list of predefined words/phrases that Microsoft Purview can use to identify and classify content for DLP policies.
Steps to add a keyword dictionary:
1. Go to Microsoft Purview compliance portal
2. Navigate to Data classification > Sensitive info types
3. Create a new sensitive info type
4. Add a keyword dictionary
5. Save and use it in a DLP policy


Reference:

https://learn.microsoft.com/en-us/purview/sit-create-a-keyword-dictionary



View Related Case Study

You have a Microsoft 365 E5 tenant and the Windows Client devices shown in the following table.

To which devices can you apply Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings?

  1. Device1 only
  2. Device1 and Device2 only
  3. Device1 and Device3 only
  4. Device1, Device3, and Device4 only
  5. Device1, Device2, Device3, and Device4

Answer(s): B


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started



View Related Case Study

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1 and the data loss prevention (DLP) policies shown in the following table.

The DLP rules are configured as shown in the following table.

All the policies are assigned to Site1.
You need to ensure that if a user uploads a document to Site1 that matches all the rules, the user will be shown the Tip 2 policy tip.
What should you do?

  1. Enable additional processing of the policies if there is a match for Rule1.
  2. Prevent additional processing of the policies if there is a match for Rule2.
  3. Change the priority of DLP2 to 3.
  4. Change the priority of DLP2 to 0.

Answer(s): D

Explanation:

The rule with priority 0 is processed first.


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-policy-reference



  PDF
Viewing page 31 of 60
Viewing questions 151 - 155 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!