You have a Microsoft 365 tenant that uses trainable classifiers.You are creating a custom trainable classifier.You collect 300 sample file types from various geographical locations to use as seed content. Some of the file samples are encrypted.You organize the files into categories as shown in the following table. Which file categories can be used as seed content?

Category2, Category3, and Category5 only

Category1, Category2, Category3, Category4, and Category5

You have a Microsoft 365 tenant that uses Microsoft Office 365 Message Encryption (OME).You need to ensure that any emails containing attachments and sent to user1@contoso.com are encrypted automatically by using OME.What should you do?

From the Exchange admin center, create a mail flow rule.

From the Exchange admin center, create a new sharing policy.

From the Microsoft 365 security center, create a Safe Attachments policy.

From the Exchange admin center, create a mail flow rule.

From the Microsoft 365 compliance center, configure an auto-apply retention label policy.

You plan to implement sensitivity labels for Microsoft Teams.You need to ensure that you can view and apply sensitivity labels to new Microsoft Teams sites.What should you do first?

Create a new sensitivity label scoped to Groups & sites.

Run the Execute-AzureLabelSync cmdlet.

Configure the EnableMIPLabels Azure Active Directory (Azure AD) setting.

Your company has a Microsoft 365 tenant that uses a domain named contoso.com.The company uses Microsoft Office 365 Message Encryption (OME) to encrypt email sent to users in fabrikam.com.A user named User1 erroneously sends an email to user2@fabrikam.com.You need to prevent user2@fabrikam.com from accessing the email.What should you do?

Run the Get-MessageTrace cmdlet.

Run the Set-OMEMessageRevocation cmdlet.

Instruct User1 to delete the email from her Sent Items folder from Microsoft Outlook.

Run the New-ComplianceSearchAction cmdlet.

Instruct User1 to select Remove external access from Microsoft Outlook on the web.

You have a Microsoft 365 tenant.You discover that email does NOT use Microsoft Office 365 Message Encryption (OME).You need to ensure that OME can be applied to email.What should you do first?

Activate Azure Rights Management (Azure RMS).

Enable Microsoft Defender for Office 365.

Activate Azure Information Protection.

Activate Azure Rights Management (Azure RMS).

You have a Microsoft 365 tenant.You create the following:A sensitivity labelAn auto-labeling policyYou need to ensure that the sensitivity label is applied to all the data discovered by the auto-labeling policy.What should you do first?

Run the policy in simulation mode.

Enable insider risk management.

Run the Enable-TransportRule cmdlet.

Run the policy in simulation mode.

You have a sensitive information type based on a trainable classifier.You are unsatisfied with the result of the result of trainable classifier.You need to retrain the classifier.What should you use in the Microsoft 365 compliance center?

Content explorer from Data classification

Labels from Information protection

Labels from Information governance

Content explorer from Data classification

You need to recommend a solution that meets the compliance requirements for viewing DLP tooltip justifications.What should you recommend?

Instruct the compliance department users to review the False positive and override report.

Configure a Microsoft Power Automate workflow to route DLP notification emails to the compliance department.

Instruct the compliance department users to review the DLP incidents report.

Configure an Azure logic app to route DLP notification emails to the compliance department.

You need to recommend a solution that meets the compliance requirements for Dropbox.What should you recommend?

Create a file policy in Cloud App Security that uses the built-in DLP inspection method.

Edit an existing retention label that enforces the item deletion settings.

Create a retention label that enforces the item deletion settings.

Create a DLP policy that applies to devices.

You need to implement a solution that meets the compliance requirements for the Windows 10 computers.Which two actions should you perform? Each correct answer presents part of the solution. (Choose two.)NOTE: Each correct selection is worth one point.

Configure hybrid Azure AD join for all the computers.

Enroll the computers in Microsoft Defender for Endpoint protection.

Deploy a Microsoft 365 Endpoint data loss prevention (Endpoint DLP) configuration package to the computers.

Configure the Microsoft Intune device enrollment settings.

Configure hybrid Azure AD join for all the computers.

Configure a compliance policy in Microsoft Intune.

Enroll the computers in Microsoft Defender for Endpoint protection.

You need to recommend a solution to configure the Microsoft 365 Records management settings by using the CSV file. The solution must meet the compliance requirements.What should you recommend?

From the Microsoft 365 compliance center, import the CSV file to a file plan.

Use EdmUploadAgent.exe to upload a hash of the CSV to a datastore.

Use a PowerShell command that pipes the Import-Csv cmdlet to theNew-RetentionPolicy cmdlet.

From the Microsoft 365 compliance center, import the CSV file to a file plan.

Use a PowerShell command that pipes the Import-Csv cmdlet to the New-Label cmdlet.

You need to recommend a solution that meets the Data Loss Prevention requirements for the HR department. Which three actions should you perform? Each correct answer presents part of the solution. (Choose three.)NOTE: Each correct selection is worth one point.

Schedule EdmUploadAgent.exe to hash and upload a data file that contains employee information.

Create a sensitive info type rule package that contains the EDM classification.

Define the sensitive information database schema in the XML format.

Schedule EdmUploadAgent.exe to hash and upload a data file that contains employee information.

Create a sensitive info type rule package that contains the EDM classification.

Define the sensitive information database schema in the XML format.

Create a sensitive info type rule package that contains regular expressions.

Define the sensitive information database schema in the CSV format.

You need to recommend a solution that meets the compliance requirements for protecting the documents in the Data shared folder.What should you recommend?

From Azure Information Protection, configure a content scan job.

From the Microsoft 365 compliance center, configure an auto-labeling policy.

From Azure Information Protection, configure a content scan job.

From the Microsoft 365 compliance center, configure a Content Search query.

From the Microsoft 365 compliance center, configure a DLP policy.

You need to recommend a solution that meets the executive requirements.What should you recommend?

From the Microsoft 365 compliance center, create a retention label.

From the Microsoft 365 compliance center, create a DLP policy.

From the Exchange admin center, enable archive mailboxes.

From the Microsoft 365 compliance center, create a retention label.

From the Microsoft 365 compliance center, create a retention policy.

You need to recommend a solution that meets the compliance requirements for Dropbox.What should you recommend?

Create a file policy in Microsoft Defender for Cloud Apps that uses the built-in DLP inspection method.

Create a DLP policy that applies to devices.

Create a file policy in Microsoft Defender for Cloud Apps that uses the built-in DLP inspection method.

Create a retention label that enforces the item deletion settings.

Edit an existing retention label that enforces the item deletion settings.

You need to meet the technical requirements for the Site3 documents.What should you create?

a retention policy that has Only delete items when they reach a certain age selected

a retention label policy and a retention label that uses an event

a sensitive info type that uses a regular expression and a sensitivity label

a sensitive info type that uses a dictionary and a sensitivity label

You need to meet the technical requirements for the creation of the sensitivity labels.To which user or users must you grant the Sensitivity label administrator role?

Admin1, Admin2, Admin4, and Admin5 only

Admin1, Admin2, and Admin3 only

Microsoft SC-400 Practice Test 3 - Free Online Exam Prep & Questions

Question 1 / 40

You need to test Microsoft Office 365 Message Encryption (OME) capabilities for your company. The test must verify the following information:

The acquired default template names

The encryption and decryption verification status

Which PowerShell cmdlet should you run?

Test-ClientAccessRule

Test-Mailflow

Test-OAuthConnectivity

Test-IRMConfiguration

Comment (0)

Microsoft SC-400 Practice Test 3

Question

Microsoft SC-400 Practice Tests

Practice Tests