SC-401 Practice Test

Question 16

You have a Microsoft 365 E5 subscription that contains the groups shown in the following table. The subscription contains the resources shown in the following table. You create a sensitivity label named Label1. You need to publish Label1 and have the label apply automatically. To what can you publish Label1, and to what can Label1 be auto-applied? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 17

You have a Microsoft 365 ES subscription that uses Microsoft Exchange Online and Teams. You need to ensure that when a user sends a message containing a cloud attachment, a retention label is applied to the cloud attachment by using an auto-labeling policy. How should you configure the retention label to start the retention period, and to which locations should you apply the auto-labeling policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 18

You create a data loss prevention (DLP) policy that meets the following requirements: • Prevents guest users from accessing a sensitive document shared during a Microsoft Teams chat • Prevents guest users from accessing a sensitive document stored in a Microsoft Teams channel Which location should you select for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 19

You have a Microsoft 365 E5 subscription that uses Microsoft Purview. You need to create a sensitive information type (SIT) to detect project code content that starts with the letters pjt followed by six digits and ends with the letters sct. The following is an example of the project code. pjt123456sct How should you complete the regular expression? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 20

You have a Microsoft 365 E5 subscription that contains a Windows 11 device named Device1 and three users named User1, User2, and User3. You plan to deploy Azure information Protection (AIP) and the Microsoft Purview information Protection client to Device1. You need to ensure that the users can perform the following actions on Device1 as part of the planned deployment: • User1 will test the functionality of the client. • User2 will install and configure the Microsoft Rights Management connector. • User3 will be configured as the service account for the information protection scanner. The solution must maximize the security of the sign-in process for the users. What should you do?

1. Exclude User1 and User2 from multifactor authentication (MFA).
2. Enable User2 and User3 for passwordless authentication.
3. Exclude User2 and User3 from multifactor authentication (MFA).
4. Enable User1, User2, and User3 for passkey (FIDO2) authentication.