Question 21
SC-401 Practice Test
SC-401 Practice Test practice questions, page 5 of 12, with answer review and explanations.
Question 22
You have a Microsoft 365 alert named Alert2 as shown in the following exhibit. You need to manage the status of Alert2. To which status can you change Alert2?
- The status cannot be changed.
- Dismissed only
- Investigating only
- Active or Investigating only
- Investigating, Active, or Dismissed
Question 23
You have a Microsoft 365 subscription that uses retention label policies. You need to identify all the changes made to retention labels during the last 30 days. What should you use in the Microsoft Purview portal?
- Reports
- Activity explorer
- Content search
- Use data search
Question 24
You have a Microsoft 365 E5 subscription that contains a user named User1. You deploy Microsoft Purview Data Security Posture Management for AI (DSPM for AI). You need to ensure that User1 can verify the auditing status of the subscription. The solution must follow the principle of least privilege. To which role group should you add User1?
- Security Reader
- Insider Risk Management Analysts
- Insider Risk Management Investigators
- View-Only Organization Management for Microsoft Exchange Online
Question 25