Microsoft SC-400 Microsoft Information Protection Administrator Exam Exam Practice Test Questions

• Question 1

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. Site1 contains a file named File1.You have a retention policy named Retention! that has the following settings:* Retain items for a specific periodo Retention period: 5 years o At the end of the retention period: Delete items automaticallyRetention1 is applied to Site.You need to ensure that File1 is deleted automatically after seven years. The solution must NOT affect the retention of other files on Site1.What should you do first?

  • Move File1 to a new folder and list the excluded locations for Retention1.
  • Create a new retention policy.
  • Create and publish a new retention label
  • Move File1 to a new folder and configure the access control list (ACL) entries for File1.

  Show Answer Answer: C Next

• Question 2

  You need to recommend a solution that meets the executive requirements. What should you recommend?

  • From the Microsoft 365 compliance center, create a retention policy.
  • From the Exchange admin center, enable archive mailboxes.
  • From the Microsoft 365 compliance center, create a retention label.
  • From the Microsoft 365 compliance center, create a DLP policy.

  Show Answer Answer: C Next

• Question 3

  Your company has a Microsoft 365 tenant that uses a domain named contoso.com.You are implementing data loss prevention (DLP).The company's default browser is Microsoft Edge.During a recent audit, you discover that some users use Firefox and Google Chrome browsers to upload files labeled as Confidential to a third-party Microsoft SharePoint Online site that has a URL of https://m365x076709.sharepoint.com. Users are blocked from uploading the confidential files to the site from Microsoft Edge.You need to ensure that the users cannot upload files labeled as Confidential from Firefox and Google Chrome to any cloud services.Which two actions should you perform? Each correct answer presents part of the solution. (Choose two.)NOTE: Each correct selection is worth one point.

  • From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add m365x076709.sharepoint.com as a blocked service domain.
  • Create a DLP policy that applies to the Devices location.
  • From the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings, add Firefox and Google Chrome to the unallowed browsers list.
  • From the Microsoft 365 compliance center, onboard the devices.
  • From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add contoso.com as an allowed service domain.

  Show Answer Answer: C, D Next

• Question 4

  You need to recommend a solution that meets the compliance requirements for viewing DLP tooltipjustifications.What should you recommend?

  • Instruct the compliance department users to review the False positive and override report.
  • Configure a Microsoft Power Automate workflow to route DLP notification emails to the compliance department.
  • Instruct the compliance department users to review the DLP incidents report.
  • Configure an Azure logic app to route DLP notification emails to the compliance department.

  Show Answer Answer: A Next

• Question 5

  You have a data loss prevention (DLP) policy that applies to the Devices location. The policy protects documents that contain States passport numbers.Users reports that they cannot upload documents to a travel management website because of the policy.You need to ensure that the users can upload the documents to the travel management website. The solution must prevent the protected content from being uploaded to other locations.Which Microsoft 365 Endpoint data loss prevention (Endpoint DLP) setting should you configure?

  • Unallowed apps
  • File path exclusions
  • Service domains
  • Unallowed browsers

  Show Answer Answer: C Next