[Jul-2024] SC-400 Pre-Exam Practice Tests Exam Questions and Answers for Microsoft Certified: Information Protection Administrator Associate Study Guide [Q86-Q101]

4/5 - (3 votes)

[Jul-2024] SC-400 Pre-Exam Practice Tests | Exam Questions and Answers for Microsoft Certified: Information Protection Administrator Associate Study Guide

Microsoft Information Protection Administrator Certification Sample Questions

The SC-400 exam covers a wide range of topics related to Microsoft Information Protection solutions, including data classification, labeling, and protection, as well as compliance and governance. You will be tested on your ability to design and implement data loss prevention policies, configure Azure Information Protection, and manage data retention and archiving. Additionally, you will need to demonstrate your knowledge of regulatory compliance requirements and your ability to implement compliance solutions using Microsoft technologies.

Microsoft Information Protection Administrator (SC-400) certification exam is designed to validate the skills and knowledge of professionals in the field of information protection. SC-400 exam covers a wide range of topics related to data security and privacy, including data classification, data loss prevention, and identity and access management. Those who pass the exam will earn a valuable certification that demonstrates their expertise in this critical area of IT security.

NO.86 How many files in Site2 will be visible to User1 and User2 after you turn on DLPpolicy1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

Reference:
https://social.technet.microsoft.com/wiki/contents/articles/36527.implement-data-loss-prevention-dlp-in-sharepo

NO.87 You need to meet the technical requirements for the Site3 documents.
What should you create?

a retention label policy and a retention label that uses an event

a sensitive info type that uses a dictionary and a sensitivity label

a sensitive info type that uses a regular expression and a sensitivity label

a retention policy that has Only delete items when they reach a certain age selected

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/event-driven-retention?view=o365-worldwide

NO.88 A user reports that she can no longer access a Microsoft Excel file named Northwind Customer Data.xlsx.
From the Cloud App Security portal, you discover the alert shown in the exhibit.

You restore the file from quarantine.
You need to prevent files that match the policy from being quarantined. Files that match the policy must generate an alert.
What should you do?

Modify the policy template.

Assign the Global reader role to the file owners.

Exclude file matching by using a regular expression.

Update the governance action.

Reference:
https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies#create-a-new-file-policy

NO.89 You have a Microsoft 365 tenant.
A retention hold is applied to all the mailboxes in Microsoft Exchange Online.
A user named User1 leaves your company, and the account of User1 is deleted from Azure Active Directory (Azure AD).
You need to create a new user named User2 and provide User2 with access to the mailbox of User1.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbox?view=o365-worldwide

NO.90 You have a Microsoft 365 tenant that uses Microsoft Office 365 Message Encryption (OME).
You need to ensure that any emails containing attachments and sent to [email protected] are encrypted automatically by using OME.
What should you do?

From the Exchange admin center, create a new sharing policy.

From the Microsoft 365 security center, create a Safe Attachments policy.

From the Exchange admin center, create a mail flow rule.

From the Microsoft 365 compliance center, configure an auto-apply retention label policy.

You can create mail flow rules to help protect email messages you send and receive. You can set up rules to encrypt any outgoing email messages and remove encryption from encrypted messages coming from inside your organization or from replies to encrypted messages sent from your organization.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?view=o365-worldwide

NO.91 You need to meet the technical requirements for the confidential documents.
What should you created first, and what should you use for the detection method? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-custom-sensitive-information-type?view=o

NO.92 You need to recommend a solution that meets the sales requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NO.93 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 tenant and 500 computers that run Windows 10. The computers are onboarded to the Microsoft 365 compliance center.
You discover that a third-party application named Tailspin_scanner.exe accessed protected sensitive information on multiple computers. Tailspin_scanner.exe is installed locally on the computers.
You need to block Tailspin_scanner.exe from accessing sensitive documents without preventing the application from accessing other documents.
Solution: From the Cloud App Security portal, you create an app discovery policy.
Does this meet the goal?

Yes

Explanation
You can create app discovery policies to alert you when new apps are detected within your organization.
Use the unallowed apps list instead.
Reference:
https://docs.microsoft.com/en-us/cloud-app-security/cloud-discovery-policies
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-using?view=o365-worldwide

NO.94 You need to recommend a solution that meets the compliance requirements for protecting the documents in the Data shared folder. What should you recommend?

From the Microsoft 365 compliance center, configure a DLP policy.

From the Microsoft 365 compliance center, configure a Content Search query.

From the Microsoft 365 compliance center, configure an auto-labeling policy.

From Azure Information Protection, configure a content scan job.

Reference:
https://docs.microsoft.com/en-us/azure/information-protection/deploy-aip-scanner

NO.95 You have a Microsoft 365 tenant.
You have a database that stores customer details. Each customer has a unique 13-digit identifier that consists of a fixed pattern of numbers and letters.
You need to implement a data loss prevention (DLP) solution that meets the following requirements:
* Email messages that contain a single customer identifier can be sent outside your company,
* Email messages that contain two or more customer identifiers must be approved by the company s data privacy team.
Which two components should you include in the solution? Each correct answer presents part of the solution. NOTE Each correct selection is worth one point.

a sensitive information type

a DLP policy

a mail flow rule

a sensitivity label

a retention label

NO.96 You need to protect documents that contain credit card numbers from being opened by users outside your company. The solution must ensure that users at your company can open the documents.
What should you use?

a retention policy

a sensitivity label policy

a sensitivity label

a data loss prevention (DLP) policy

NO.97 You have a Microsoft 365 subscription.
In Microsoft Exchange Online, you configure the mail flow rule shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Explanation:

NO.98 You have a Microsoft 365 tenant named contoso.com that contains two users named User1 and User2. The tenant uses Microsoft Office 365 Message Encryption (OME).
User1 plans to send emails that contain attachments as shown in the following table.

User2 plans to send emails that contain attachments as shown in the following table.

For which emails will the attachments be protected? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://support.microsoft.com/en-gb/office/introduction-to-irm-for-email-messages-bb643d33-4a3f-4ac7-9770-fd
https://docs.microsoft.com/en-us/microsoft-365/compliance/ome?view=o365-worldwide
https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/exchange-on

NO.99 You plan to implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).
You need to identify which end user activities can be audited on the endpoints, and which activities can be restricted on the endpoints.
What should you identify for each activity? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365-worldwide

NO.100 You have a data loss prevention (DLP) policy configured for endpoints as shown in the following exhibit.

From a computer named Computer1, 3 user can sometimes upload files to cloud services and sometimes cannot. Other users experience the same issue. What are two possible causes of the issue? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.