support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Microsoft
  4. SC-401

Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 Questions 39–43 (page: 32)

Updated On: 1-Oct-2026
Page 32 of 60
PDF with 291 Questions
View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription.
You create an adaptive scope named Scope1 as shown in the following exhibit.

You create a retention policy named Policy1 that includes Scope1.
To which three locations can you apply Policy1? To answer select the appropriate locations in the answer area.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




A retention policy with an adaptive scope defined by the Microsoft 365 Groups type can be applied to
Exchange email, SharePoint sites, and OneDrive accounts. However, the scope is most effective when applied to locations that are a part of the Microsoft 365 Group, such as the group's mailbox (Exchange email) and the group's associated SharePoint site, which includes its OneDrive for Business account.
Box 1: Exchange email
Box 2: SharePoint sites
Box 3: OneDrive accounts
How it works
Adaptive Scopes: These scopes are dynamic filters that automatically identify target locations for a retention policy.
Group Type Scope: When you use the "Microsoft 365 Groups" scope type, it targets content associated with a group, which includes:
The group's mailbox in Exchange.
The group's associated SharePoint site.
The group's associated OneDrive for Business account.
Application: The policy is automatically applied to all users and sites within the group, making it a scalable solution for managing retention across the group's entire ecosystem.
Flexibility: This is particularly useful for organizations where group membership and content locations change frequently, as the policy automatically adapts to these changes.


Reference:

https://learn.microsoft.com/en-us/purview/purview-adaptive-scopes



View Related Case Study

DRAG DROP (Drag and Drop is not supported)
You need to create a trainable classifier that can be used as a condition in an auto-apply retention label policy.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:







To create a trainable classifier that can be used in an auto-apply retention label policy, you need to follow these key steps:
Step 1: Create the trainable classifier
This is the first step where you define the classifier, specifying the types of content it should identify.
Step 2: Test the trainable classifier
Before using the classifier in production, you need to validate its accuracy by testing it against sample documents to ensure it correctly classifies the intended data.
Step 3: Publish the trainable classifier
Once testing is successful, you must publish the classifier so that it can be used in policies like auto-apply retention labels in Microsoft Purview.



View Related Case Study

Your company has a Microsoft 365 tenant.
The company performs annual employee assessments. The assessment results are recorded in a document named AssessmentTemplate.docx that is created by using a Microsoft Word template. Copies of the employee assessments are sent to employees and their managers.
The assessment copies are stored in mailboxes, Microsoft SharePoint Online sites, and OneDrive folders. A
copy of each assessment is also stored in a SharePoint Online folder named Assessments.
You need to create a data loss prevention (DLP) policy that prevents the employee assessments from being emailed to external users. You will use a document fingerprint to identify the assessment documents. The solution must minimize effort.
What should you include in the solution?

  1. Create a fingerprint of AssessmentTemplate.docx.
  2. Create a sensitive info type that uses Exact Data Match (EDM).
  3. Import 100 sample documents from the Assessments folder to a seed folder.
  4. Create a fingerprint of 100 sample documents in the Assessments folder.

Answer(s): A

Explanation:

Since all employee assessments follow a specific template (AssessmentTemplate.docx), the best way to identify these documents for Data Loss Prevention (DLP) is to create a document fingerprint of that template.
Document fingerprinting allows Microsoft 365 DLP policies to recognize documents based on their structure and format, even when content inside varies (such as different employee names and results). By creating a fingerprint of AssessmentTemplate.docx, any copy derived from that template will be automatically detected by the DLP policy and blocked from being emailed externally.
Steps to implement:
● Create a document fingerprint of AssessmentTemplate.docx using PowerShell and the Microsoft Purview compliance portal.
● Apply a DLP policy to prevent external sharing of documents matching this fingerprint.
● Test the policy by attempting to email an assessment externally.



View Related Case Study

You receive an email that contains a list of words that will be used for a sensitive information type.
You need to create a file that can be used as the source of a keyword dictionary.
In which format should you save the list?

  1. an XLSX file that contains one word in each cell of the first row
  2. an XML file that contains a keyword tag for each word
  3. an ACCDB database file that contains a table named Dictionary
  4. a text file that has one word on each line

Answer(s): D

Explanation:

Correct:
* a CSV file that contains words separated by commas
* a text file that has one word on each line
Incorrect:
* an ACCDB database file that contains a table named Dictionary
* a DOCX file that has one word on each line
* a JSON file that has an element for each word
* a TSV file that contains words separated by tabs
* an XML file that contains a keyword tag for each word
* an XLSX file that contains one word in each cell of the first row
Note:
To create a keyword dictionary for a sensitive information type in Microsoft Purview Data Loss Prevention
(DLP), you must use a plain text (.txt) file (or a .CSV file) where each keyword is on a separate line.
Format Example (TXT file):
confidential sensitive classified top secret
This format is simple, efficient, and directly compatible with Microsoft 365 DLP policies for keyword dictionaries.
How to use the keyword dictionary?
Create a text file with one keyword per line.
Upload it to Microsoft Purview under Data Classification > Sensitive Info Types.
Use the dictionary in a DLP policy to identify and protect sensitive information.
In steps:
Create a keyword dictionary using the Microsoft Purview portal
Use these steps to create or import keywords for a custom dictionary:
1. Sign in to the Microsoft Purview portal Information Protection > Classifiers > Sensitive info types.
2. Select + Create sensitive info type and then enter a Name and Description for your sensitive info type.
Choose Next.
3. On the Define patterns for this sensitive info type page, choose + Create pattern.
4. In the New pattern window, select a Confidence level.
5. Choose Add a Primary element and select Keyword dictionary.
*-> 6. On the Add a keyword dictionary flyout, you can:
6a. Upload a dictionary file in TXT or CSV format.
6b. Choose from existing dictionaries.
or create a new dictionary by entering keywords manually and giving it a name.


Reference:

https://learn.microsoft.com/en-us/purview/sit-create-a-keyword-dictionary



View Related Case Study

You need to provide a user with the ability to view data loss prevention (DLP) alerts in the Microsoft Purview portal. The solution must use the principle of least privilege.
Which role should you assign to the user?

  1. Security Operator
  2. Security Reader
  3. Compliance Data Administrator
  4. Compliance Administrator

Answer(s): B


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-configure-view-alerts-policies



  PDF
Viewing page 32 of 60
Viewing questions 156 - 160 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!