Free SC-401 Exam Braindumps
Administering Information Security in Microsoft 365 (page: 6)

Updated On: 19-Oct-2026
View Related Case Study

You have a Microsoft 365 E5 tenant that has a retention label named Label1.
You need to create an auto-labeling policy that will apply Label1.
To which location can Label1 be applied?

  1. Teams channel messages
  2. OneDrive accounts
  3. on-premises repositories
  4. Teams chats

Answer(s): B

Explanation:

Correct:
* OneDrive accounts
Incorrect:
* Microsoft Defender for Cloud Apps
* Microsoft Entra security groups
* on-premises repositories
* Teams channel messages
* Teams chats
Note:
A Microsoft 365 auto-labeling policy can be applied to Exchange mailboxes, SharePoint sites, and OneDrive accounts. It can also be applied to content within Teams and other Microsoft 365 Groups, as well as Azure services like Azure SQL and Azure Cosmos DB.
Exchange Online: Applies to emails in transit.
SharePoint: Applies to documents stored at rest in SharePoint sites.
OneDrive: Applies to documents stored at rest in OneDrive accounts.
Teams: Applies to documents stored in the SharePoint sites associated with a Team.
Azure and other data sources: Can be extended to apply to data stored in services like Azure SQL, Azure
Cosmos DB, and more.


Reference:

https://learn.microsoft.com/en-us/purview/apply-sensitivity-label-automatically



View Related Case Study

DRAG DROP (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription.
You need to label Microsoft Exchange Online emails that match the following conditions:
▪ Contain employment offers
▪ Contain offensive language
▪ Contain medical terms and conditions
The solution must minimize administrative effort.
Which type of data classification should you use for each condition? To answer, drag the appropriate data classification types to the correct conditions. Each data classification type may be used once, more than once,
or not at all. You may need to drag the split bar between panes or scroll to view content.
Note: Each correct selection is worth one point.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:






Box 1: Sensitive info Type
Box 2: Trainable classifier
Contain offensive language
Trainable classifiers definitions
Microsoft Purview comes with multiple pretrained classifiers. They appear in the Microsoft Purview compliance portal > Data classification > Trainable classifiers view with the status of Ready to use.
For example:
* Profanity
Detects a specific category of offensive language text items that contain expressions that embarrass most people.
Box 3: Exact Data Match (EDM)
Contain medical terms and conditions
With Exact Data Match (EDM) based classification, you can create a custom sensitive information type that is designed to:
be dynamic and easily refreshed result in fewer false-positives work with structured sensitive data handle sensitive information more securely, not sharing it with anyone, including Microsoft be used with several Microsoft cloud services
EDM-based classification enables you to create custom sensitive information types that refer to exact values in a database of sensitive information. The database can be refreshed daily, and can contain up to 100 million rows of data. So as employees, patients, or clients come and go, and as records change, your custom sensitive information types remain current and applicable.


Reference:

https://learn.microsoft.com/en-us/purview/classifier-learn-about https://learn.microsoft.com/en-us/purview/classifier-tc-definitions https://learn.microsoft.com/en-us/purview/sit-learn-about-exact-data-match-based-sits



View Related Case Study

SIMULATION
Username and password
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and select the username below.
To enter your password, place your cursor in the Enter password box and select the password below.
Microsoft 365 Username:
admin@WWLx971455.onmicrosoft.com
Microsoft 365 Password: XXXXXXXXX
If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL “https://admin microsoft.com”, and press Enter.
The following information is for technical support purposes only:
Lab Instance: XXXXXXXX.
Task 3
You plan to automatically apply a watermark to the documents of a project named Falcon.
You need to create a label that will add a watermark of “Project Falcon” in red, size-12 font diagonally across the documents.

  1. See Explanation section for answer.

Answer(s): A

Explanation:

See explanation below.


Create and configure sensitivity labels
Step 1: From the Microsoft Purview compliance portal, select Solutions > Information protection > Labels
Step 2: On the Labels page, select + Create a label to start the new sensitivity label configuration:

Step 3: On the Define the scope for this label page, the options selected determine the label's scope for the settings that you can configure and where they'll be visible when they're published. In our case select: Items,
Files, and select Word documents.

Note: If Items is selected, you can configure settings that apply to apps that support sensitivity labels, such as
Office Word and Outlook. Optionally, you can extend these labels to include meetings from Teams and
Outlook, and to protecting Teams meetings themselves by enforcing settings for Teams meetings and related chat.
Step 4: Follow the configuration prompts for the label settings. Use the help in the UI for individual settings.
Step 5: In the UI add a watermark of “Project Falcon” in red, size-12 font diagonally across the document.
Note: What sensitivity labels can do
After a sensitivity label is applied to an email, meeting invite, or document, any configured protection settings for that label are enforced on the content. You can configure a sensitivity label to:
* Mark the content when you use Office apps, by adding watermarks, headers, or footers to email, meeting invites, or documents that have the label applied. Watermarks can be applied to documents but not email or meeting invites. Example header and watermark:

Step 6: Finish the Wizard


Reference:

https://learn.microsoft.com/en-us/purview/create-sensitivity-labels https://answers.microsoft.com/en-us/msteams/forum/all/how-to-automatically-apply-sensitivity-labels-to/2482d
1b2-1fe6-4a80-af4a-2b93b9c670de



View Related Case Study

You need to test Microsoft Purview Advanced Message Encryption capabilities for your company. The test must verify the following information:
▪ The acquired default template names
▪ The encryption and decryption verification status
Which PowerShell cmdlet should you run?

  1. Test-OAuthConnectivity
  2. Test-ClientAccessRule
  3. Test-IRMConfiguration
  4. Test-Mailflow

Answer(s): C

Explanation:

Verify Microsoft Purview Message Encryption configuration in Exchange Online PowerShell
You can verify that your Microsoft 365 tenant is properly configured to use Microsoft Purview Message
Encryption in Exchange Online PowerShell.
1. Using a work or school account that has sufficient permissions in your organization, such as Compliance
Administrator, start a Windows PowerShell session and connect to Exchange Online. For instructions, see
Connect to Exchange Online PowerShell.
2. Run the Get-IRMConfiguration cmdlet.
You should see a value of $True for the AzureRMSLicensingEnabled parameter, which indicates that Microsoft
Purview Message Encryption is configured in your tenant. If it is not, use Set-IRMConfiguration to set the value of AzureRMSLicensingEnabled to $True to enable Microsoft Purview Message Encryption.


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message-encryption-capabilities



View Related Case Study

You have a Microsoft 365 E5 subscription that contains a Windows 11 device named Device1 and three users named User1, User2, and User3.
You plan to deploy Azure Information Protection (AIP) and the Microsoft Purview information Protection client to Device1.
You need to ensure that the users can perform the following actions on Device1 as part of the planned deployment:
▪ User1 will test the functionality of the client.
▪ User2 will install and configure the Microsoft Rights Management connector.
▪ User3 will be configured as the service account for the information protection scanner.
The solution must maximize the security of the sign-in process for the users.
What should you do?

  1. Exclude User1 and User2 from multifactor authentication (MFA).
  2. Enable User2 and User3 for passwordless authentication.
  3. Exclude User2 and User3 from multifactor authentication (MFA).
  4. Enable User1, User2, and User3 for passkey (FIDO2) authentication.

Answer(s): C

Explanation:

Multi-factor authentication (MFA) and Azure Information Protection
Rights Management connector requirements
The Rights Management connector and the Microsoft Purview Information Protection scanner do not support
MFA.
If you deploy the connector or scanner, the following accounts must not require MFA:
The account that installs and configures the connector. [User2]
The service principal account in Microsoft Entra ID, Aadrm_S-1-7-0, that the connector creates.
The service account that runs the scanner. [User3]


Reference:

https://learn.microsoft.com/en-us/azure/information-protection/requirements-azure-ad



Viewing page 6 of 60
Viewing questions 26 - 30 out of 291 questions


Post your Comments and Discuss Microsoft SC-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!