SC-400 practice test

1. Question 1 · 1

   You create three sensitivity labels named Sensitivity1, Sensitivity2, and Sensitivity3 and perform the following actions: ✑ Publish Sensitivity1. ✑ Create an auto-labeling policy for Sensitivity2. You plan to create a file policy named Policy1 in Microsoft Cloud App Security. Which sensitivity labels can you apply to Microsoft SharePoint Online in Policy1?

   Choose one answer.

   • Sensitivity1 only
   • Sensitivity1, Sensitivity2, and Sensitivity3
   • Sensitivity2 only
   • Sensitivity1 and Sensitivity2 only

2. Question 2 · 1

   You need to automatically apply a sensitivity label to documents that contain information about your company's network including computer names, IP addresses, and configuration information. Which two objects should you use? Each correct answer presents part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • an Information protection auto-labeling policy
   • a custom trainable classifier
   • a sensitive info type that uses a regular expression
   • a data loss prevention (DLP) policy
   • a sensitive info type that uses keywords
   • a sensitivity label that has auto-labeling

3. Question 3 · 1

   Each product group at your company must show a distinct product logo in encrypted emails instead of the standard Microsoft Office 365 logo. What should you do to create the branding templates?

   Choose one answer.

   • Create a Transport rule.
   • Create an RMS template.
   • Run the Set-IRMConfiguration cmdlet.
   • Run the New-OMEConfiguration cmdlet.

4. Question 4 · 1

   You create a custom sensitive info type that uses Exact Data Match (EDM). You plan to periodically update and upload the data used for EDM. What is the maximum frequency with which the data can be uploaded?

   Choose one answer.

   • twice per week
   • twice per day
   • once every six hours
   • once every 48 hours
   • twice per hour

5. Question 5 · 1

   A user reports that she can no longer access a Microsoft Excel file named Northwind Customer Data.xlsx. From the Cloud App Security portal, you discover the alert shown in the exhibit. You restore the file from quarantine. You need to prevent files that match the policy from being quarantined. Files that match the policy must generate an alert. What should you do?

   Choose one answer.

   

   • Modify the policy template.
   • Assign the Global reader role to the file owners.
   • Exclude file matching by using a regular expression.
   • Update the governance action.

6. Question 6 · 1

   You receive an email that contains a list of words that will be used for a sensitive information type. You need to create a file that can be used as the source of a keyword dictionary. In which format should you save the list?

   Choose one answer.

   • a JSON file that has an element for each word
   • an ACCDB database file that contains a table named Dictionary
   • an XML file that contains a keyword tag for each word
   • a CSV file that contains words separated by commas

7. Question 7 · 1

   You have a Microsoft 365 E5 tenant that uses a domain named contoso.com. A user named User1 sends link-based, branded emails that are encrypted by using Microsoft Office 365 Advanced Message Encryption to the recipients shown in the following table. For which recipients can User1 revoke the emails?

   Choose one answer.

   

   • Recipient4 only
   • Recipient1 only
   • Recipient1, Recipient2, Recipient3, and Recipient4
   • Recipient3 and Recipient4 only
   • Recipient1 and Recipient2 only

8. Question 8 · 1

   You have a Microsoft OneDrive for Business folder that contains the files shown in the following table. In Microsoft Cloud App Security, you create a file policy to automatically apply a classification. What is the effect of applying the policy?

   Choose one answer.

   

   • The policy will apply to only the .docx and .txt files. The policy will classify the files within 24 hours.
   • The policy will apply to all the files. The policy will classify only 100 files daily.
   • The policy will apply to only the .docx files. The policy will classify only 100 files daily.
   • The policy will apply to only the .docx and .txt files. The policy will classify the files immediately.

9. Question 9 · 1

   You have a Microsoft 365 tenant that uses Microsoft Office 365 Message Encryption (OME). You need to ensure that any emails containing attachments and sent to user1@contoso.com are encrypted automatically by using OME. What should you do?

   Choose one answer.

   • From the Exchange admin center, create a new sharing policy.
   • From the Microsoft 365 security center, create a Safe Attachments policy.
   • From the Exchange admin center, create a mail flow rule.
   • From the Microsoft 365 compliance center, configure an auto-apply retention label policy.

10. Question 10 · 1

    You plan to implement sensitivity labels for Microsoft Teams. You need to ensure that you can view and apply sensitivity labels to new Microsoft Teams sites. What should you do first?

    Choose one answer.

    • Run the Set-SPOSite cmdlet.
    • Create a new sensitivity label scoped to Groups & sites.
    • Run the Execute-AzureAdLabelSync cmdlet.
    • Configure the EnableMIPLabels Azure Active Directory (Azure AD) setting.

11. Question 11 · 1

    HOTSPOT - You have Microsoft 365 E5 tenant that has a domain name of M365x925027.onmicrosoft.com. You have a published sensitivity label. The Encryption settings for the sensitivity label are configured as shown in the exhibit. For each of the following statements, select Yes if statement is true. Otherwise, select No NOTE: Each correct selection is worth one point. Hot Area:

    Choose an option for each prompt.

    

    

    Only users at your company can view an email that has the sensitivity label applied.

    • • Yes
    • • No

    The owner of an email can assign permissions when applying the sensitivity label.

    • • Yes
    • • No

    USSales@M365x925027.onmicrosoft.com can print an email that has the sensitivity label applied.

    • • Yes
    • • No

12. Question 12 · 1

    Your company has a Microsoft 365 tenant that uses a domain named contoso.com. The company uses Microsoft Office 365 Message Encryption (OME) to encrypt email sent to users in fabrikam.com. A user named User1 erroneously sends an email to user2@fabrikam.com. You need to prevent user2@fabrikam.com from accessing the email. What should you do?

    Choose one answer.

    • Run the Get-MessageTrace cmdlet.
    • Run the Set-OMEMessageRevocation cmdlet.
    • Instruct User1 to delete the email from her Sent Items folder from Microsoft Outlook.
    • Run the New-ComplianceSearchAction cmdlet.
    • Instruct User1 to select Remove external access from Microsoft Outlook on the web.

13. Question 13 · 1

    You have a Microsoft 365 tenant. You create the following: ✑ A sensitivity label ✑ An auto-labeling policy You need to ensure that the sensitivity label is applied to all the data discovered by the auto-labeling policy. What should you do first?

    Choose one answer.

    • Enable insider risk management.
    • Create a trainable classifier.
    • Run the Enable-TransportRule cmdlet.
    • Run the policy in simulation mode.

14. Question 14 · 1

    HOTSPOT - You have the retention label policy shown in the Policy exhibit. (Click the Policy tab.) Users apply the retention label policy to files and set the asset ID as shown in the following table. On December 1, 2020, you create the event shown in the Event exhibit. (Click the Event tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

    Choose an option for each prompt.

    

    

    

    

    Doc1.docx will be retained until December 30, 2027.

    • • Yes
    • • No

    Doc2.docx will be retained until September 30, 2027.

    • • Yes
    • • No

    Doc3.docx will be retained until September 30, 2027.

    • • Yes
    • • No

15. Question 15 · 1

    You have a sensitive information type based on a trainable classifier. You are unsatisfied with the result of the result of trainable classifier. You need to retrain the classifier. What should you use in the Microsoft 365 compliance center?

    Choose one answer.

    • Labels from Information protection
    • Labels from Information governance
    • Content explorer from Data classification
    • Content search

Paid access to all 267 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.