2022 Latest Microsoft SC-400 Real Exam Dumps PDF [Q20-Q37]

ExamBoosts May 31, 2022 SC-400 > Microsoft 0

Rate this post

2022 Latest Microsoft SC-400 Real Exam Dumps PDF

SC-400 Exam Dumps, SC-400 Practice Test Questions

Microsoft SC-400 Exam Syllabus Topics:

Topic	Details
Topic 1	Manage and respond to data loss prevention policy violations Configure data loss prevention for policy precedence
Topic 2	Create and manage custom sensitive information types Apply sensitivity labels to Microsoft Teams, Microsoft 365 groups, and SharePoint sites
Topic 3	Configure and manage sensitivity label policies Implement Office 365 Advanced Message Encryption
Topic 4	Configure policies in Microsoft Cloud App Security (MCAS) Implement data loss prevention policies in test mode
Topic 5	Manage data loss prevention violations in Microsoft Cloud App Security (MCAS) Create and configure data loss prevention policies
Topic 6	Manage and monitor data loss prevention policies and activities Implement and monitor Microsoft Endpoint data loss prevention
Topic 7	Define requirements for implementing Office 365 Message Encryption Verify a trainable classifier is performing properly
Topic 8	Configure policies for Microsoft Teams chat and channel messages Manage permissions for data loss prevention reports
Topic 9	Manage protection settings and marking for applied sensitivity labels Create custom sensitive information types with exact data match

NO.20 At the end of a project you upload project documents to a Microsoft SharePoint Online library that contains many fifes. Files that have the following naming format must be labeled as Project I
* aei_AA989.docx
* bd_WSOgadocx
* cei_DLF112-docx
* ebc_QQ4S4.docx
* ecc_BB565.docx
You plan to create an auto-apply retention label policy.
What should you use to identify the files, and which regular expression should you use? To answer, select the appropriate options in the answer area.

NO.21 You have a Microsoft 365 tenant.
A retention hold is applied to all the mailboxes in Microsoft Exchange Online.
A user named User1 leaves your company, and the account of User1 is deleted from Azure Active Directory (Azure AD).
You need to create a new user named User2 and provide User2 with access to the mailbox of User1.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Graphical user interface, text, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbox?view=o365-worldwide

NO.22 You have a Microsoft 365 tenant that uses a domain named canstoso.com.
A user named User1 leaves your company. The mailbox of User1 is placed on Litigation Hold, and then the account of User1 is deleted from Azure Active Directory (Azure AD).
You need to copy the content of the User1 mailbox to a folder in the existing mailbox of another user named User2.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.23 At the end of a project you upload project documents to a Microsoft SharePoint Online library that contains many fifes. Files that have the following naming format must be labeled as Project I
* aei_AA989.docx
* bd_WSOgadocx
* cei_DLF112-docx
* ebc_QQ4S4.docx
* ecc_BB565.docx
You plan to create an auto-apply retention label policy.
What should you use to identify the files, and which regular expression should you use? To answer, select the appropriate options in the answer area.

NO.24 Your company has a Microsoft 365 tenant that uses a domain named Contoso.com.
You are implementing data loss prevention (DIP).
The company’s default browser in Microsoft Edge.
During a recent audit, you discover that some user use Firefox and Google Chromo browsers to upload files labeled as Confidential to a third party Microsoft SharePoint Online site that has a URL of
https://m365x076709.sharepoint .Uses are blocked from uploading the confidential files to the site from Microsoft Edge.
You need to ensure that the users cannot upload files labels as Confidential from Firefox and Google Chrome to any cloud services.
NOTE: Each correct selection is worth one point.

From the Microsoft 3G5 Endpoint data loss prevention (Endpoint DLP) settings, add Firefox and Google Chrome to the unallowed browsers list.

Create a DIP policy that applies to the Devices location.

From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add contoso.com as an allowed service domain.

From the Microsoft 365 compliance center, onboard the dcvu.es.

From the Microsoft J6b Endpoint data loss prevention (Endpoint) DLP settings, add:
m36Sx0767W-sharepomt.com as a blacked service domain.

NO.25 You need to implement a solution to encrypt email. The solution must meet the compliance requirements.
What should you create in the Exchange admin center and the Microsoft 36.S compliance center? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/ome-sensitive-info-types?view=o365-worldwide

NO.26 You have a data loss prevention (DLP) policy configured for endpoints as shown in the following exhibit.

From a computer named Computer1, 3 user can sometimes upload files to cloud services and sometimes cannot. Other users experience the same issue. What are two possible causes of the issue? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

The Access by unallowed apps action is set to Audit only.

The computers are NOT onboarded to the Microsoft 365 compliance center.

The Copy to clipboard action is set to Audit only.

There are file path exclusions in the Microsoft 365 Endpoint data loss prevention (Endpoint DIP) settings.

The unallowed browsers in the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings are NOT configured.

NO.27 You need to recommend a solution that meets the compliance requirements for protecting the documents in the Data shared folder. What should you recommend?

From the Microsoft 365 compliance center, configure a DLP policy.

From the Microsoft 365 compliance center, configure a Content Search query.

From the Microsoft 365 compliance center, configure an auto-labeling policy.

From Azure Information Protection, configure a content scan job.

Reference:
https://docs.microsoft.com/en-us/azure/information-protection/deploy-aip-scanner
Topic 2, Contoso
Problem Statements
Management at Contoso is concerned about data leaks. On several occasions, confidential research departments were leaked.
Planned Changes
Contoso plans to create the following data loss prevention (DLP) policy:
* Name: DLPpolicy1
* Locations to apply the policy; Site2
* Conditions:
* Content contains any of these sensitive info types: SWIF F Code
* Instance count: 2 to any
* Actions: Restrict access to the content
Technical Requirements
Contoso must meet the following technical requirements:
* All administrative users must be able to review DLP reports.
* Whenever possible, the principle of least privilege must be used.
* For all users, all Microsoft 365 data must be retained for at least one year.
* Confidential documents must be detected and protected by using Microsoft 365.
* Site1 documents that include credit card numbers must be labeled automatically.
* All administrative users must be able to create Microsoft 365 sensitivity labels.
* After a project is complete, the documents in Site3 that relate to the project must be retained for 10 years

NO.28 You have a Microsoft 365 tenant.
A new regulatory requirement states that all documents containing a patent ID be labeled, retained for 10 years, and then deleted. The policy used to apply the retention settings must never be disabled or deleted by anyone.
You need to implement the regulatory requirement.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Choose three.)

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-preservation-lock?view=o365-worldwide

NO.29 You need to recommend a solution that meets the compliance requirements for protecting the documents in the Data shared folder.
What should you recommend?

From the Microsoft 365 compliance center, configure an auto-labeling policy.

From Azure Information Protection, configure a content scan job.

From the Microsoft 365 compliance center, configure a Content Search query.

From the Microsoft 365 compliance center, configure a DLP policy.

Explanation/Reference:
https://docs.microsoft.com/en-us/azure/information-protection/deploy-aip-scanner Implement Data Loss Prevention Question Set 1

NO.30 You have a data loss prevention (DLP) policy configured for endpoints as shown in the following exhibit.

From a computer named Computer1, 3 user can sometimes upload files to cloud services and sometimes cannot. Other users experience the same issue. What are two possible causes of the issue? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

The Access by unallowed apps action is set to Audit only.

The computers are NOT onboarded to the Microsoft 365 compliance center.

The Copy to clipboard action is set to Audit only.

There are file path exclusions in the Microsoft 365 Endpoint data loss prevention (Endpoint DIP) settings.

The unallowed browsers in the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings are NOT configured.

NO.31 You need to meet the technical requirements for the Site1 documents.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Create a senstive info type.
2 – Create a sensitivity label.
3 – Create an auto-labeling policy.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide#how-to-configure-auto-labeling-policies-for-sharepoint-onedrive-and-exchange

NO.32 You need to implement a solution that meets the compliance requirements for the Windows 10 computers.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each coned selection is worth one point.

Deploy a Microsoft 36S Endpoint data loss prevention (Endpoint DLP) configuration package to the computers.

Configure hybrid Azure AD join for all the computers.

Configure the Microsoft Intune device enrollment settings.

Configure a compliance policy in Microsoft Intune.

Enroll the computers in Microsoft Defender for Endpoint protection.

NO.33 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You recently discovered that the developers at your company emailed Azure Storage keys in plain text to third parties.
You need to ensure that when Azure Storage keys are emailed, the emails are encrypted.
Solution: You configure a mail flow rule that matches the text patterns.
Does this meet the goal?

Yes

Reference:
https://docs.microsoft.com/en-us/exchange/policy-and-compliance/mail-flow-rules/conditions-and-exceptions?view=exchserver-2019

NO.34 You create a data loss prevention (DLP) policy. The Advanced DLP rules page is shown in the Rules exhibit.

The Review your settings page is shown in the review exhibit.

You need to review the potential impact of enabling the policy without applying the actions.
What should you do?

Edit the policy, remove all the actions in DLP rule 1, and select I’d like to test it out first.

Edit the policy, remove the Restrict access to the content and Send incident report to Administrator actions,
and then select Yes, turn it on right away.

Edit the policy, remove all the actions in DLP rule 1, and select Yes, turn it on right away.

Edit the policy, and then select I’d like to test it out first.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-dlp-policy-from-a-template?view=o365-worldwide

NO.35 You have a Microsoft 365 tenant.
A new regulatory requirement states that all documents containing a patent ID be labeled, retained for 10 years, and then deleted. The policy used to apply the retention settings must never be disabled or deleted by anyone.
You need to implement the regulatory requirement.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Choose three.)

Explanation

NO.36 You create a data loss prevention (DLP) policy that meets the following requirements:
* Prevents guest users from accessing a sensitive document shared during a Microsoft Teams chat
* Prevents guest users from accessing a sensitive document stored in a Microsoft Teams channel Which location should you select for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-microsoft-teams?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoftteams/sharepoint-onedrive-interact

NO.37 You have the files shown in the following table.

You configure a retention policy as shown in the following exhibit.

The current date is January 1, 2021.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.