Pass Your Exam With 100% Verified SC-401 Exam Questions [Q17-Q36]

ExamBoosts August 18, 2026 Uncategorized 0

Rate this post

Pass Your Exam With 100% Verified SC-401 Exam Questions

SC-401 Dumps PDF – SC-401 Real Exam Questions Answers

NEW QUESTION 17
Hotspot Question
You create a retention policy as shown in the following exhibit.

A user named User1 deletes a file named File1.docx from a Microsoft SharePoint Online site named Site1.
A user named User2 deletes an email and empties the Deleted Items folder in Microsoft Outlook.
Where is the content retained one year after deletion? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide

NEW QUESTION 18
You need to meet the retention requirement for the users’ Microsoft 365 data.
What is the minimum number of retention policies required to achieve the goal?

The requirement states that all Microsoft 365 data for users must be retained for at least one year. In Microsoft 365, retention policies must be configured for each type of data storage.
Step 1: Identifying Where Data is Stored
From the case study, users store data in the following locations:
*SharePoint Online sites
*OneDrive accounts
*Exchange email
*Exchange public folders
*Teams chats
*Teams channel messages
Since these locations fall under two broad categories:
*Microsoft Exchange data (Emails, Public folders)
*SharePoint, OneDrive, and Teams data
Step 2: Required Retention Policies
A single retention policy can cover:
*SharePoint Online
*OneDrive
*Microsoft Teams
2. A second retention policy is required for:
*Exchange (Emails & Public Folders)
Thus, the minimum number of retention policies required to meet the requirement is 2.
Microsoft 365 retention policies can be applied broadly across multiple services with just two policies:
*One for Exchange & Public Folders
*One for SharePoint, OneDrive, and Teams
There’s no need for separate policies for each individual workload unless different retention durations are required, which is not stated in the requirement.

NEW QUESTION 19
You have a Microsoft 365 E5 subscription.
You plan to implement insider risk management for users that manage sensitive data associated with a project.
You need to create a protection policy for the users. The solution must meet the following requirements:
# Minimize the impact on users who are NOT part of the project.
# Minimize administrative effort.
What should you do first?

From the Microsoft Purview portal, create an insider risk management policy.

From the Microsoft Entra admin center, create a security group.

From the Microsoft Entra admin center create a User risk policy

From the Microsoft Purview portal create a priority user group

Insider risk management policies in Microsoft Purview target users based on priority user groups.
If you want to monitor a specific project team, you must first define those users in a priority user group so that policies affect only them.
This approach:
Minimizes the impact on users not part of the project.
Reduces administrative effort since you don’t need to manage multiple security groups in Entra ID.
Reference:
Microsoft Learn: Priority user groups in insider risk management
Quote: “To focus risk management policies on specific users…create and manage priority user groups in the Microsoft Purview compliance portal.”

NEW QUESTION 20
Hotspot Question
You have a Microsoft 365 E5 tenant that contains the objects shown in the following table.

You need to restore a Microsoft Word document that was deleted from the Sales channel by User1.
From where can the document be restored, and how long will the document be retained if it is NOT restored? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:
Box 1: Microsoft Teams
Restore items in the recycle bin that were deleted from SharePoint or Teams When you delete items from a document library or list in Microsoft Teams or SharePoint, they aren’t immediately removed. Deleted items go into the SharePoint site recycle bin for a period of time or until they are emptied from the recycle bin. The SharePoint site recycle bin isn’t the same as the Windows recycle bin that you see on your desktop.
Box 2: 30 days
Restore a shared library
SharePoint in Microsoft 365 Microsoft Teams
If lots of your SharePoint or Microsoft Teams files get deleted, overwritten, corrupted, or infected by malware, you can restore an entire shared document library to a previous time. The restore will undo all the actions that occurred on both files and folders in the last 30 days.
If your entire library was deleted, see Restore items in the Recycle Bin of a SharePoint site. If you want to correct issues with individual files one at a time, you can restore deleted items or restore a previous version of an item.
Reference:
https://support.microsoft.com/en-us/office/restore-items-in-the-recycle-bin-that-were-deleted-from-sharepoint-or-teams-6df466b6-55f2-4898-8d6e-c0dff851a0be
https://support.microsoft.com/en-us/office/restore-a-shared-library-317791c3-8bd0-4dfd-8254-3ca90883d39a

NEW QUESTION 21
Hotspot Question
You have a Microsoft 365 E5 subscription.
You have a Microsoft Purview Advanced Message Encryption branding template named OME1.
You need to create a Microsoft Exchange Online mail flow rule to apply OME1 to email.
How should you configure the rule? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:
Box 1: The Sender
Create an Exchange mail flow rule that applies your custom branding to encrypted emails sent from your online organization to external recipients In Apply this rule if, select the condition The sender is located inside the organization and other conditions you want from the list of available conditions. For example, you might want to apply a particular branding template to:
All encrypted emails sent from members of the finance department
Encrypted emails sent with a certain keyword such as “External” or “Partner” Encrypted emails sent to a particular domain Box 2: Is External/internal Box 3: Modify the message security.
From Do the following, select Modify the message security > Apply custom branding to OME messages. Next, from the drop-down, select a branding template.
Select add action if you want to specify another action, or select Save, and then select OK.
Reference:
https://learn.microsoft.com/en-us/microsoft-365/compliance/add-your-organization-brand-to- encrypted-messages

NEW QUESTION 22
You have a Microsoft 365 tenant
You need to create a new sensitive into type for items that contain the following:
* An employee ID number that consists of the hire date of the employee followed by a three digit number
* The words “Employee”, “ID”, or “Identification” within 300 characters of the employee ID number What should you use for the primary and secondary elements? To answer, select the appropriate options m the answer area NOTE: Each correct selection is worth one point

Explanation:

NEW QUESTION 23
You have a Microsoft 365 subscription. Auditing is enabled.
A user named User1 is a member of a dynamic security group named Group1.
You discover that User1 is no longer a member of Group1.
You need to search the audit log to identify why User1 was removed from Group1.
Which two activities should you use in the search? To answer, select the appropriate activities in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

NEW QUESTION 24
Hotspot Question
You have a Microsoft 365 subscription.
You create a retention label named Label1 as shown in the following exhibit.

You publish Label1 to SharePoint sites.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Explanation:
Reference:
https://docs.microsoft.com/en-us/office365/securitycompliance/labels

NEW QUESTION 25
Hotspot Question
You have Microsoft 365 E5 tenant that has a domain name of 86s40q.onmicrosoft.com.
The tenant contains the users shown in the following table.

You have a published sensitivity label.
The Access control settings for the sensitivity label are configured as shown in the exhibit. (Click the Exhibit tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NEW QUESTION 26
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site! and the data loss prevention (DLP) policies shown in the following table.

The DLP rules are configured as shown In the following table.

All the policies are assigned to Site1.
You need to ensure that if a user uploads a document to Site1 that matches all the rules, the user will be shown the Tip 2 policy tip. What should you do?

Change the priority of DLP2 to 0.

Prevent additional processing of the policies if there is a match for Rule2

Change the priority of DLP2 to 3.

Enable additional processing of the policies if there is a match for Rule1.

Current setup:
DLP1 (priority 0, Rule1) # Stop processing additional rules enabled # means if Rule1 matches, later rules (including Rule2 with Tip2) will never be evaluated.
Requirement: Ensure that if all rules match, the user sees Tip2 (Rule2’s policy tip).
To fix this: Move DLP2 above DLP1 in priority (i.e., set DLP2 = priority 0). Then Rule2 will be evaluated first, and its policy tip (Tip2) will be displayed.
Why not others?
B). Prevent additional processing of the policies if there is a match for Rule2: That would stop processing later, but DLP1 would still block earlier due to its higher priority.
C). Change the priority of DLP2 to 3: That pushes it even lower, making it worse.
D). Enable additional processing for Rule1: Rule1 already has stop processing enabled. Changing that does not ensure Rule2 runs before Rule1, because priority is evaluated first.
Reference:
Microsoft Learn: Order of rule processing in DLP
# Policies with lower priority numbers run first, and “Stop processing” ends evaluation.

NEW QUESTION 27
You have a Microsoft 365 E5 subscription.
You plan to implement Microsoft Purview insider risk management.
You implement the HR data connector.
You need to prepare the data that will be imported by the data connector.
In which format should you prepare the data?

JSON

CSV

TSV

XML

PRN

When implementing Microsoft Purview Insider Risk Management and using the HR data connector, you must prepare HR data in CSV (Comma-Separated Values) format. This format is required because Microsoft Purview supports CSV files for importing user employment details, termination dates, role changes, and other HR-related attributes.

NEW QUESTION 28
You have a Microsoft 365 subscription that contains two Microsoft SharePoint Online sites named Site1 and Site2. You plan to use policies to meet the following requirements:
* Add a watermark of Confidential to a document if the document contains the words Project1 or Project2.
* Retain a document for seven years if the document contains credit card information.
* Add a watermark of Internal Use Only to all the documents stored on Site2.
* Add a watermark of Confidential to all the documents stored on Site1.
You need to recommend the minimum number of sensitive info types required.
How many sensitive info types should you recommend?

NEW QUESTION 29
You need to meet the technical requirements for the Site1 documents.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NEW QUESTION 30
You are implementing Microsoft Purview Advanced Message Encryption for a Microsoft 365 tenant named contoso.com You need to meet the following requirements:
* All email to a domain named (abrikam.com must be encrypted automatically.
* Encrypted emails must expire seven days after they are sent
What should you configure for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

Requirement 1 – Encrypt all email to fabrikam.com automatically
To force encryption for mail sent to a specific external domain (fabrikam.com):
You configure a mail flow rule (transport rule) in the Exchange admin center (EAC).
This rule can apply Office Message Encryption (OME) automatically when messages match conditions such as recipient domain.
Reference: Define mail flow rules to encrypt email messages
Correct choice: A mail flow rule in the Exchange admin center
Requirement 2 – Encrypted emails must expire after 7 days
To configure expiration and access control over encrypted emails:
You use Microsoft Purview sensitivity labels with encryption settings.
A label policy in the Purview portal can enforce encryption, set access rights, and define expiration (e.g., revoke access after 7 days).
Sensitive info types or mail flow rules cannot configure expiration.
Reference: Configure encryption settings for sensitivity labels
Correct choice: A label policy in the Microsoft Purview portal

NEW QUESTION 31
You have a Microsoft 36S subscription that contains the users shown in the following table.

You create the data loss prevention (DLP) policies shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation:
If User1 sends an email externally with five credit card numbers, Policy1 applies. # Yes If User1 sends an email externally with five credit card numbers, Policy2 also applies. # No (stopped by Policy1).
If User2 sends an email externally with five credit card numbers, Policy2 applies. # Yes
# Policy1
Order: 0 (highest priority).
Scope: Exchange email for the Finance distribution group.
Conditions: Content shared externally AND contains # 5 credit card numbers.
Actions: Encrypt with “Encrypt email” option.
Additional options: Stop processing additional DLP policies and rules.
# Policy2
Order: 1 (lower priority).
Scope: All Exchange email.
Conditions: Content shared externally AND contains # 5 credit card numbers.
Actions: Restrict/block OR encrypt depending on configuration, notify admin.
Additional options: None.
# User-by-user Analysis
User1 (Finance group):
Policy1 applies first (priority 0).
If User1 sends email externally with # 5 CCNs, Policy1 encrypts the email and stops further processing.
Therefore, Policy2 never applies to User1.
User2 (Sales group):
Not in Finance, so Policy1 does not apply.
Policy2 applies (all Exchange email).
If User2 sends email externally with # 5 CCNs, Policy2 action is enforced (restrict/block or encrypt).

NEW QUESTION 32
You have a Microsoft 365 alert named Alert2 as shown in the following exhibit.

You need to manage the status of Alert? To which status can you change Alette?

The status cannot be changed.

Dismissed only

Investigating only

Active or Investigating only

Investigating. Active, or Dismissed

NEW QUESTION 33
You have the files shown in the following table.

You configure a retention policy as shown >n the exhibit. (Click the Exhibit lab.) The start of the retention period is based on when items are created. The current date is January 01. 207S.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Explanation:

File1
Location: SharePoint Online.
Created: Dec 28, 2015.
As of Jan 1, 2025 # File is 9+ years old.
If retention is (example: 7 years), then the retention period has expired, and the file will be deleted once the policy is turned on.
# Answer: Yes
File2
Location: OneDrive.
Created: Jan 2, 2015.
As of Jan 1, 2025 # File is 10 years old.
Retention period (7 years, for example) has expired # File will be deleted once the policy is turned on.
# Answer: Yes
File3
Location: Exchange Online public folder.
Created: May 1, 2010.
As of Jan 1, 2025 # File is 15 years old.
But Exchange public folders are not supported locations for Microsoft 365 retention policies.
Therefore, policy does not apply, and file will not be deleted.
# Answer: No

NEW QUESTION 34
You have 4 Microsoft 565 E5 subscription that contains two Microsoft SharePoint Online sites named Site1 and Site2. You plan to configure a retention label named Labe1 and apply label1 to all the files in Site1 You need to ensure that two years after a file is created in Site1. the file moves automatically to Site2. How should you configure the Choose what happens after the retention period setting for Label1?

Deactivate retention settings

Start a disposition review

Change the label

Run a Power Automate flow

NEW QUESTION 35
XYZ firm handles sensitive legal and financial data, and you need to design Data Loss Prevention (DLP) policies to prevent unauthorized sharing and leakage. What is the first step in designing an effective DLP policy for your organization?

Enable auditing for all users

Analyze the types of sensitive data your organization handlesright

Block external sharing across the board

Configure retention policies

The first step in designing a DLP (Data Loss Prevention) policy for your organization is to analyze the types of sensitive data your organization handles. Understanding what sensitive data exists and where it is located is crucial for creating effective DLP policies tailored to your organization’s specific needs.
References:
https://learn.microsoft.com/en-us/purview/dlp-policy-design
https://learn.microsoft.com/en-us/purview/dlp-create-deploy-policy?tabs=purview

NEW QUESTION 36
You have a Microsoft 365 E5 subscription.
You need to apply data loss prevention (DLP) policies to the following:
– Microsoft Exchange Online mailboxes
– Microsoft SharePoint Online sites
– Microsoft 365 Copilot
– Microsoft OneDrive accounts
– On-premises repositories
What is the minimum number of DLP policies required to achieve the goal?

The minimum number of data loss prevention (DLP) policies required to achieve the goal is 2.
In Microsoft Purview Data Loss Prevention (DLP), certain locations cannot be combined within the same policy due to technical constraints.
Policy 1 (Unified M365 and On-Premises Workloads): You can select and combine Exchange Online mailboxes, SharePoint Online sites, OneDrive accounts, and On-premises repositories simultaneously inside a single standard DLP policy.
Policy 2 (Microsoft 365 Copilot): When creating a custom DLP policy, turning on the Microsoft 365 Copilot location automatically disables all other location selections for that policy. Therefore, Copilot must reside in its own dedicated policy.
Reference:
https://learn.microsoft.com/en-us/purview/dlp-learn-about-dlp

Loading …