SC-400: Microsoft Information Protection Administrator

You need to recommend a solution that meets the Data Loss Prevention requirements for the HR department. Which three actions should you perform? Each correct answer presents part of the solution. (Choose three.)

NOTE: Each correct selection is worth one point.

Schedule EdmUploadAgent.exe to hash and upload a data file that contains employee information.
Create a sensitive info type rule package that contains the EDM classification.
Define the sensitive information database schema in the XML format.
Create a sensitive info type rule package that contains regular expressions.
Define the sensitive information database schema in the CSV format.

Correct answer: ABC

Explanation:

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-custom-sensitive-information-types-with-exact-data-match-based-classification?view=o365-worldwide

You need to recommend a solution that meets the compliance requirements for protecting the documents in the Data shared folder.

What should you recommend?

From the Microsoft 365 compliance center, configure an auto-labeling policy.
From Azure Information Protection, configure a content scan job.
From the Microsoft 365 compliance center, configure a Content Search query.
From the Microsoft 365 compliance center, configure a DLP policy.

Correct answer: B

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/information-protection/deploy-aip-scanner

You need to recommend a solution that meets the sales requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Choose three.)

Correct answer: To display the answer, ProfExam Simulator is required.

Explanation:

Reference:https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide

You need to implement a solution to encrypt email. The solution must meet the compliance requirements.

What should you create in the Exchange admin center and the Microsoft 365 compliance center? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct answer: To display the answer, ProfExam Simulator is required.

Explanation:

Users must be able to manually select that email messages are sent encrypted. The encryption will use Office 365 Message Encryption (OME) v2. Any email containing an attachment that has the Fabrikam Confidential sensitivity label applied must be encrypted automatically by using OME.Reference:https://docs.microsoft.com/en-us/microsoft-365/compliance/ome-sensitive-info-types?view=o365-worldwide

Users must be able to manually select that email messages are sent encrypted. The encryption will use Office 365 Message Encryption (OME) v2. Any email containing an attachment that has the Fabrikam Confidential sensitivity label applied must be encrypted automatically by using OME.

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/ome-sensitive-info-types?view=o365-worldwide

You need to meet the technical requirements for the Site3 documents.

What should you create?

a retention policy that has Only delete items when they reach a certain age selected
a retention label policy and a retention label that uses an event
a sensitive info type that uses a regular expression and a sensitivity label
a sensitive info type that uses a dictionary and a sensitivity label

Correct answer: A

You need to meet the technical requirements for the creation of the sensitivity labels.

To which user or users must you grant the Sensitivity label administrator role?

Admin1, Admin2, Admin4, and Admin5 only
Admin1, Admin2, and Admin3 only
Admin1 only
Admin1 and Admin4 only
Admin1 and Admin5 only

Correct answer: D

Explanation:

Compliance Data Administrator, Compliance Administrator, and Security Administrator already have the required permissions to create the labels.Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels?view=o365-worldwide#permissions-required-to-create-and-manage-sensitivity-labels

Compliance Data Administrator, Compliance Administrator, and Security Administrator already have the required permissions to create the labels.

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels?view=o365-worldwide#permissions-required-to-create-and-manage-sensitivity-labels

You need to meet the technical requirements for the confidential documents.

What should you create first, and what should you use for the detection method? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct answer: To display the answer, ProfExam Simulator is required.

Explanation:

Reference:https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-custom-sensitive-information-type?view=o365-worldwide

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-custom-sensitive-information-type?view=o365-worldwide

You need to meet the technical requirements for the Site1 documents.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct answer: To display the answer, ProfExam Simulator is required.

Explanation:

Reference:https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide#how-to-configure-auto-labeling-policies-for-sharepoint-onedrive-and-exchange

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide#how-to-configure-auto-labeling-policies-for-sharepoint-onedrive-and-exchange

You have a Microsoft 365 tenant that uses 100 data loss prevention (DLP) policies.

A Microsoft Exchange administrator frequently investigates emails that were blocked due to DLP policy violations.

You need recommend which DLP report the Exchange administrator can use to identify how many messages were blocked based on each DLP policy.

Which report should you recommend?

Third-party DLP policy matches
DLP policy matches
DLP incidents
False positive and override

Correct answer: B

Explanation:

Reference:https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide

You have a data loss prevention (DLP) policy configured for endpoints as shown in the following exhibit.

From a computer named Computer1, a user can sometimes upload files to cloud services and sometimes cannot. Other users experience the same issue.

What are two possible causes of the issue? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

The computers are NOT onboarded to the Microsoft 365 compliance center.
The Copy to clipboard action is set to Audit only.
There are file path exclusions in the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings.
The Access by unallowed apps action is set to Audit only.
The unallowed browsers in the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings are NOT configured.

Correct answer: DE

Vendor:	Microsoft
Exam Code:	SC-400
Exam Name:	Microsoft Information Protection Administrator
Date:	Apr 19, 2024
File Size:	14 MB
Downloads:	2

Download Microsoft Information Protection Administrator.SC-400.VCEplus.2024-04-19.93q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown