Free Microsoft SC-401 Exam Questions

Question 1

You have a Microsoft 365 E5 tenant that contains a user named User1. User1 is assigned the Compliance Administrator role. User1 cannot view the regular expression in the IP Address sensitive info type. You need to ensure that User! can view the regular expression. What should you do?

A : Assign Used to the Reviewer role group

B : Create a copy of the IP Address sensitive info type and instruct User1 to edit the copy.

C : Instruct User1 to use the Test function on the sensitive info type.

D : Assign User1 the Global Reader role.

Answer: B

Question 2

You have a data loss prevention (DIP) policy that applies to the Devices location. The policy protects documents that contain United States passport numbers Users report that they cannot upload documents to a travel management website because of the pokey. Vou need to ensure that the users can upload the documents to the travel management website. The solution must prevent the protected content from being uploaded to other locations. Which Microsoft 365 Endpoint data loss prevention (Endpoint DIP) setting should you configure?

A : Service domains

B : Unallowed browsers

C : File path exclusions

D : Unallowed apps

Answer: A

Question 3

You have a Microsoft 365 E5 tenant that contains a user named User1. User1 is assigned the Compliance Administrator role. User1 cannot view the regular expression in the IP Address sensitive info type. You need to ensure that User! can view the regular expression. What should you do?

A : Assign Used to the Reviewer role group

B : Create a copy of the IP Address sensitive info type and instruct User1 to edit the copy.

C : Instruct User1 to use the Test function on the sensitive info type.

D : Assign User1 the Global Reader role.

Answer: B

Question 4

You have a Microsoft 365 subscription. You need to ensure that users can apply retention labels to individual documents in their Microsoft SharePoint libraries. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A : From Microsoft Defender for Cloud Apps, create a file policy.

B : From the SharePoint admin center, modify the Site Settings.

C : From the SharePoint ad min center, modify the records management settings.

D : From the Microsoft Purview portal, publish a label.

E : From the Microsoft Purview portal, create a label.

Answer: D,E

Question 5

You have a Microsoft 365 subscription. You have a user named User1 Several users have full access to the mailbox of User1. Some email messages sent to User 1 appeal to have been read and deleted before the user viewed them When you search the audit log in the Microsoft Purview portal to identify who signed in to the mailbox of User l. the results are blank. You need to ensure that you can view future sign-ins to the mailbox of User1. Solution: You run the Set-AuditConfig -Workload Exchange command. Does that meet the goal?

A : Yes

B : No

Answer: A