Free Microsoft SC-401 Exam Dumps Questions & Answers

You have a Microsoft 365 tenant that uses Microsoft Purview Message Encryption.
You need to ensure that any emails containing attachments and sent to [email protected] are encrypted automatically by using Microsoft Purview Message Encryption.
What should you do?

• A.  From the Exchange admin center, create a new sharing policy.
• B.  From the Exchange admin center, create a mail flow rule.
• C.  From the Microsoft Defender portal, create a Safe Attachments policy.
• D.  From the Microsoft Purview portal, configure an auto-apply retention label policy.

Drag and Drop Question
You have a Microsoft 365 E5 subscription that contains two users named User1 and User2.
You need to implement insider risk management. The solution must meet the following requirements:
- Ensure that User1 can create insider risk management policies.
- Ensure that User2 can use content captured by using insider risk
management policies.
- Follow the principle of least privilege.
To which role group should you add each user? To answer, drag the appropriate role groups to the correct users. Each role group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: Insider Risk Management Admins
Ensure that User1 can create insider risk management policies.
Use this role group to initially configure insider risk management and later to segregate insider risk administrators into a defined group. Users in this role group can create, read, update, and delete insider risk management policies, global settings, and role group assignments.
Box 2: Insider Risk Management Investigators
Investigators can access & view forensic evidence captures and Content Explorer.
Reference:
https://learn.microsoft.com/en-us/purview/insider-risk-management-permissions

Drag and Drop Question
You have a Microsoft 365 E5 subscription that has data loss prevention (DLP) implemented.
You need to create a custom sensitive info type. The solution must meet the following requirements:
- Match product serial numbers that contain a 10-character alphanumeric string.
- Ensure that the abbreviation of SN appears within six characters of
each product serial number.
- Exclude a test serial number of 1111111111 from a match.
Which pattern settings should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Microsoft custom sensitive info types use pattern settings to refine detection accuracy for data loss prevention (DLP) policies.
The Primary element defines the main pattern that must be detected. Since we need to match a
10-character alphanumeric string, this should be defined in the primary element.
Character proximity determines how close a supporting keyword (e.g., "SN") must be to the detected data. Since "SN" must be within six characters of the product serial number, this setting ensures a valid match.
Additional checks allow for exceptions and exclusions in the detection logic. This ensures that
1111111111 (a test serial number) is excluded from triggering a match.

You have a Microsoft 365 E5 subscription that contains two users named User1 and Admin1.
Admin1 manages audit retention policies for the subscription.
You need to ensure that the audit logs of User1 will be retained for 10 years.
What should you do first?

• A.  Assign a 10-year audit log retention add-on license to Admin1.
• B.  Assign a Microsoft Purview Audit (Premium) add-on license to Admin1.
• C.  Assign a 10-year audit log retention add-on license to User1.
• D.  Assign a Microsoft Purview Audit (Premium) add-on license to User1.

Hotspot Question
You have a Microsoft 365 E5 subscription.
You are implementing insider risk management.
You need to create an insider risk management notice template and format the message body of the notice template.
How should you configure the template? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: Microsoft Purview portal
Create insider risk management notice templates
To create a new insider risk management notice template, you'll use the notice creation tool in Insider risk management solution in the Microsoft Purview portal.
Box 2: HTML
HTML for notices
If you'd like to create more than a simple text-based email message for notifications, you can create a more detailed message by using HTML in the message body field of a notice template.
Reference:
https://learn.microsoft.com/en-us/purview/insider-risk-management-notices