SC-400 Exam Prep

Your organization is having MS purview license. you need to protect sensitive data using sensitivity label. there are three labels created named Confidential, Highly Confidential, and Personal and perform the following actions:
✑ Publish Confidential.
✑ Create an auto-labeling policy for High Confidential.
You plan to create a file policy named SamplePolicy in Microsoft Cloud App Security.
Which sensitivity labels can you apply to Microsoft SharePoint Online in Policy1?

• Confidential, Highly Confidential

• Confidential only

• Confidential, Highly Confidential, and Personal

• Highly Confidential

Your organization is having a Microsoft SharePoint Online site named news and a sensitivity label named Confidential. Confidential adds a watermark and a header to content.
You create a policy to automatically apply Confidential to site news
How will Confidential mark matching news documents?

• Watermark & Header

• a header only

• watermark only

You create a custom sensitive info type that uses Exact Data Match (EDM).
You plan to periodically update and upload the data used for EDM.
What is the maximum frequency with which the data can be uploaded?

• twice per week

• twice per day

• twice per month

• once every six hours

You receive an email that contains a list of words that will be used for a sensitive information type.
You need to create a file that can be used as the source of a keyword dictionary.
In which format should you save the list?

• a JSON file that has an element for each word

• a CSV file that contains words separated by commas

• an XML file that contains a keyword tag for each word

• an ACCDB database file that contains a table named Dictionary

Office Message Encryption (OME) is a feature within Microsoft Purview that allows organizations to send and receive encrypted email messages between people inside and outside the organization. It ensures that only intended recipients can view the content of the messages. You need to ensure that OME can be applied to organization email.
What should you do first?

• . Activate Azure Rights Management (Azure RMS).

• Enable Microsoft Defender for Office 365.

• Activate Azure Information Protection.

• Create an Azure key vault.

You plan to create a custom trainable classifier based on an organizational from template.
which role-based access control (RBAC) role is required to create the trainable classifier?

• Compliance Administrator

• Global Administrator

• Security Administrator

• Security reader

You have a Microsoft 365 E5 tenant. You need to add a new keyword dictionary. What should you create?

• a trainable classifier

• a sensitivity label

• a sensitive info type

• a retention policy

You have a Microsoft 365 E5 tenant.
You need to create a custom trainable classifier that will detect product order forms. What should you do first?

• Create SIT

• Create EDM

• Start opt-in process

• Create seed

Your organization is having Microsoft 365 E5 subscription with Microsoft Defender for Cloud Apps. You have to receive an alert when a user uploads a document to a third-party cloud storage service. What should you use?

• an insider risk policy

• a sensitivity label

• Sensitive information type

• a file policy

You have a Microsoft 365 E5 subscription. You need to ensure that encrypted email messages sent to an external recipient can be revoked or will expire within seven days. What should you configure first?

• a custom branding template

• a mail flow rule

• a Conditional Access policy

• a sensitivity label