Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 (page: 5)

Updated On: 19-Oct-2026
View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 subscription that contains the users shown in the following table.

You create the data loss prevention (DLP) policies shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: No
Policy1 will be applied. Policy1 has an exception for user4@fabrikam. The processing is stopped at Policy1.
Note: Data loss prevention (DLP) policies are processed in a specific order. This process is called policy precedence. The policy with the lowest priority number is processed first. The first rule is configured as a priority “0” by default, the next one as “1”, and so on.
Conditions are inclusive and are where you define what you want the rule to look for and context in which those items are being used.
Box 2: Yes
Policy1 will be applied.
Box 3: No
Policy2 will be applied.


Reference:

https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-policy-reference



View Related Case Study

You have a Microsoft 365 E5 subscription that has a sensitivity label named Sensitivity1.
You plan to create an auto-labeling policy that will apply Sensitivity1 to Microsoft Exchange Online mailboxes.
On February 1, you create the auto-labeling policy and enable simulation mode by using the default settings.
No modifications are made to the policy in simulation mode.
When will the policy first be turned on?

  1. February 2
  2. February 6
  3. February 15
  4. never

Answer(s): D

Explanation:

With Microsoft auto-labeling policies in simulation mode, the policy runs a trial run to test its configuration, but it doesn't automatically apply labels to content. Labels will only be applied automatically after the simulation is complete, you've reviewed the results, and you've explicitly enabled the policy for actual labeling.
Enabling for Labeling:
If the simulation results are satisfactory, you then need to enable the policy to start automatically labeling content. This is done by publishing the policy, which essentially switches it from simulation to active mode.
Note:
For the Decide if you want to test out the policy now or later page: Select Run policy in simulation mode if you're ready to run the auto-labeling policy now, in simulation mode. Then decide whether to automatically turn on the policy if it's not edited for 7 days:


Reference:

https://learn.microsoft.com/en-us/purview/apply-sensitivity-label-automatically



View Related Case Study

Your company has Microsoft 369 E5 subscription and plans to use Microsoft Purview Advanced Message
Encryption.
Each product group at your company must show a distinct product logo in encrypted emails instead of the standard Microsoft 365 logo.
What should you do to create the branding templates?

  1. Create an RMS template.
  2. Create a Transport rule.
  3. Run the New-OMEConfiguration cmdlet.
  4. Run the Set-IRMConfiguration cmdlet.

Answer(s): C


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/add-your-organization-brand-to-encrypted-messag es



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that contains two Windows devices named Device1 and Device2.
Device1 has the default browser set to Microsoft Edge. Device2 has the default browser set to Google Chrome.
You need to ensure that Microsoft Purview insider risk management can collect signals when a user copies files to a USB device by using their default browser.
What should you deploy to each device? To answer, select the appropriate options in the answer area.
Note: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: The Microsoft Purview Information protection client
Device1
Device1 has the default browser set to Microsoft Edge.
The Microsoft Purview Information Protection client, now integrated with Microsoft Edge, enables organizations to apply data security policies and protect sensitive information within the browser. Specifically, Microsoft
Purview Information Protection features like sensitivity labels and data loss prevention (DLP) can be leveraged in Edge for Business to control access and usage of sensitive documents and data.
Box 2: Microsoft Purview extension
Device2
Device2 has the default browser set to Google Chrome.
After the installation of the Microsoft Purview extension for Google Chrome, on Windows devices,
organizations get the ability to also monitor attempts to access or upload sensitive items to a Cloud service when using the Google Chrome browser, and to actually enforce protective actions via data loss prevention.
The Microsoft Purview extension is used with Google Chrome, but it's not required for Microsoft Edge because
Edge has built-in Endpoint DLP capabilities. The extension enhances data loss prevention for non-native applications, particularly for Chrome and other browsers where DLP needs to be explicitly extended.
Incorrect:
* The Microsoft Defender Browser Protection extension
Microsoft Defender Browser Protection:
Function:
Protects users from malicious websites and phishing attacks by checking URLs against known bad lists.
Focus:
Primarily a security tool for blocking threats and preventing users from accessing harmful websites or downloading malware.
Example:
Alerts users about known malicious links and provides a safe path back to safety.


Reference:

https://learn.microsoft.com/en-us/purview/dlp-chrome-get-started



View Related Case Study

You have a Microsoft 365 E5 subscription that contains a Microsoft Teams channel named Channel1.
Channel1 contains research and development documents.
You plan to implement Microsoft 365 Copilot for the subscription.
You need to prevent the contents of files stored in Channel1 from being included in answers generated by
Copilot and shown to unauthorized users.
What should you use?

  1. sensitivity labels
  2. communication compliance policy
  3. Microsoft Purview insider risk management
  4. Microsoft Purview Information Barriers (IBs)

Answer(s): A

Explanation:

Correct:
* sensitivity labels
To prevent the contents of files stored in Channel1 from being included in Microsoft 365 Copilot responses and ensure unauthorized users cannot access them, you should use Microsoft Purview Sensitivity Labels.
Sensitivity labels allow you to classify, protect, and restrict access to sensitive files. You can configure label-based encryption and access control policies to ensure that only authorized users can access or interact with the files in Channel1. Microsoft 365 Copilot respects sensitivity labels, meaning if a file is labeled with restricted permissions, Copilot will not use it in generated responses for unauthorized users.
Incorrect:
* communication compliance policy
* data loss prevention (DLP)
* Microsoft Purview Information Barriers (IBs)
* Microsoft Purview insider risk management
Note:
To prevent unauthorized access to channel file contents via Microsoft 365 Copilot, apply sensitivity labels with
Data Loss Prevention (DLP) policies to restrict content processing. Additionally, manage channel memberships, restrict sharing links in SharePoint, and enforce external access policies.
Use sensitivity labels and DLP policies
1. Apply labels: Assign sensitivity labels like "Confidential" to sensitive documents in the channel.
2. Create DLP policies: In Microsoft Purview, configure a policy to prevent Copilot from processing content that has specific sensitivity labels. This stops Copilot from summarizing sensitive files for unauthorized users.


Reference:

https://learn.microsoft.com/en-us/purview/ai-m365-copilot-considerations



Viewing page 5 of 60
Viewing questions 21 - 25 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!