Microsoft SC-401 Practice Exam Questions

Microsoft SC-401 Sample Question Answers

Question # 1

You have a Microsoft 365 subscription. You need to customize encrypted email for the subscription. The solution must meet the following requirements. Ensure that when an encrypted email is sent, the email includes the company logo. Minimize administrative effort. Which PowerShell cmdlet should you run?

A. Set-IRMConfiguration 
B. Set-OMEConfiguration 
C. Set-RMSTemplate 
D. New-OMEConfiguration 

Show Answer

Question # 2

You have a Microsoft 365 E5 subscription that contains a user named User1. You deploy Microsoft Purview Data Security Posture Management for AD (DSPM for AD). You need to ensure that User1 can verify the auditing status of the subscription. The solution must follow the principle of least privilege. To which role group should you add User1? 

A. Insider Risk Management Analysts 
B. Security Reader 
C. Insider Risk Management Investigators 
D. View-Only Organization Management for Microsoft Exchange Online 

Show Answer

Question # 3

At the end of a project, you upload project documents to a Microsoft SharePoint Online library that contains many files. The following is a sample of the project document file names: • aei_AA989.docx • bd_WS098.docx • cei_DF112.docx • ebc_QQ454.docx • ecc_BB565.docx All documents that use this naming format must be labeled as Project Documents: You need to create an auto-apply retention label policy. What should you use to identify the files?

A. A retention label
 B. A trainable classifier 
C. A sensitive info type 

Show Answer

Question # 4

You have a Microsoft 365 E5 subscription. You plan to deploy Microsoft Purview Data Security Posture Management for Al (DSPM for Al) to protect company data that contains Personally Identifiable Information (Pll) from being shared with third-party generative Al tools. You need to complete the prerequisites for the planned deployment. Which two Microsoft Purview solutions should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. Data Loss Prevention 
B. Communication Compliance 
C. Audit 
D. Insider Risk Management 
E. Information Barriers 

Show Answer

Question # 5

You have Microsoft 365 E5 subscription that uses data loss prevention (DLP) to protect sensitive information. You have a document named Form.docx. You plan to use PowerShell to create a document fingerprint based on Form.docx. You need to first connect to the subscription. Which cmdlet should you run? 

A. Connect-IPPSSession 
B. Connect-SPOService 
C. Connect-ExchangeOnline
 D. Connect-MgGraph 

Show Answer

Question # 6

You have a Microsoft 565 subscription that contains 100 users and a Microsoft 365 group named Group1. All users have Windows 11 devices and use Microsoft SharePoint Online and Exchange Online. A sensitivity label named Label! is published as the default label for Group1. You add two sublabels named Sublabel1 and Sublabel2 lo Label1. You need to ensure that the settings in Sublabel 1 are applied by default to Group 1. What should you do? 

A. Change the order of Sublabel! 
B. Duplicate all the settings from Sublabel! to Label1. 
C. Modify the policy of Label1. 
D. Delete the policy of Label1 and publish Sublabel1. 

Show Answer

Question # 7

You have a data loss prevention (DIP) policy that applies to the Devices location. The policy protects documents that contain United States passport numbers Users report that they cannot upload documents to a travel management website because of the pokey. You need to ensure that the users can upload the documents to the travel management website. The solution must prevent the protected content from being uploaded to other locations. Which Microsoft 365 Endpoint data loss prevention (Endpoint DIP) setting should you configure? 

A. Service domains 
B. Unallowed browsers 
C. File path exclusions 
D. Unallowed apps 

Show Answer

Question # 8

You have a Microsoft 365 E5 subscription. Users access their mailbox by using the following apps. • Outlook for Microsoft 365 • Outlook on the web • Outlook Mobile fiOS. Android) You create a data loss prevention (DLP) policy named DLP1 that has the following settings: • Location; Exchange email • Status: On • User notifications: On • Notify users with a policy tip: Enabled Which apps display a policy tip when content is matched by using DIP1 ?

A. Outlook for Microsoft 365 only 
B. Outlook on the web only 
C. Outlook for Microsoft 365 and Outlook on the web only 
D. Outlook for Microsoft 365 and Outlook Mobile (iOS. Android) only 
E. Outlook for Microsoft 365. Outlook on the web, and Outlook Mobile (iOS. Android) 

Show Answer

Question # 9

You receive an email that contains a list of words that will be used for a sensitive information type. You need to create a file that can be used as the source of a keyword dictionary. In which format should you save the list? 

A. an XLSX file that contains one word in each cell of the first row 
B. an XML file that contains a keyword tag for each word 
C. an ACCDB database file that contains a table named Dictionary 
D. a text file that has one word on each line

Show Answer

Question # 10

You have a Microsoft 365 E5 subscription. You need to prevent users from uploading data loss prevention (DLP)-protected documents to the following third-party websites: web1.contoso.com web2.cont The solution must minimize administrative effort. To what should you set the Service domains setting for Endpoint DLP?

A. *.contoso.com 
B. contoso.com 
C. web1.contoso.com and web2.contoso.com 
D. web*.contoso.com 

Show Answer