Microsoft SC-400 Practice Test - Questions Answers, Page 26

To restrict theConfidential - Financelabel to only the members of theFinance Teamgroup, follow these steps:

Create a Sensitivity Label:

Log in to theMicrosoft Purview portalor theMicrosoft Purview compliance portalas an admin.

Navigate toSensitivity labelsand create a new label called''Confidential - Finance''.

Specify the appropriate settings for this label, including encryption, content markings, and permissions1.

Configure Encryption Settings:

When creating the label, ensure that you configure the encryption settings.

Choose either to assign permissions now (where you determine exactly which users get which permissions) or allow users to assign permissions when they apply the label to content2.

Assign the Label to the Finance Team Group:

In theMicrosoft Purview portal, go to theGroupssection.

Select theFinance Teamgroup.

UnderSettings, chooseSensitivity labels.

Add the''Confidential - Finance''label to this group.

Only members of theFinance Teamwill now have access to this label3.

Test the Configuration:

To create a label that adds a watermark of ''Project Falcon'' in red, size-12 font diagonally across the documents, follow these steps:

Create a Sensitivity Label:

Log in to theMicrosoft Purview portalor theMicrosoft Purview compliance portalas an admin.

Navigate toSensitivity labelsand create a new label called''Project Falcon''.

Specify the appropriate settings for this label, including encryption, content markings, and permissions.

Configure Content Markings (Watermark):

When creating the label, configure the content markings section.

Choose''Watermark''and set the text to''Project Falcon''.

Select the color asredand font size as12.

Set the watermark position todiagonalacross the document.

Assign the Label:

Assign the''Project Falcon''label to the relevant documents within theFalcon project.

Users who apply this label will automatically add the specified watermark to their documents.

To block users from sending emails containing information subject to thePayment Card Industry Data Security Standard (PCI DSS), you can create aData Loss Prevention (DLP) policyinMicrosoft Exchange Online. Here's how:

Create a Custom DLP Policy:

Log in to theMicrosoft Exchange Online admin center.

Navigate toData loss prevention>Policy.

Create a new custom policy specifically for PCI DSS compliance.

Define Conditions:

In the policy settings, define conditions that identify sensitive data related to PCI DSS. For example:

Keywords: Include terms like ''credit card,'' ''debit card,'' or specific card number formats.

Regular Expressions (Regex): Craft expressions to match credit card patterns (e.g.,\b\d{4}-\d{4}-\d{4}-\d{4}\bfor Visa/Mastercard).

Sensitive Information Types: Use built-in or custom sensitive information types related to payment cards.

Choose Actions:

Specify the actions to take when sensitive data is detected in emails:

Block: Prevent the email from being sent.

Notify Sender: Inform the sender that sensitive data is not allowed via email.

Add Disclaimer/Watermark: Optionally add a disclaimer or watermark to the email.

Apply the Policy to Emails Only:

Ensure that the policy is configured to apply only toemails(not other communication channels).

Exclude internal communication if necessary.

Test and Monitor:

Enable the policy intest modeinitially to validate its effectiveness.

Monitor logs and adjust the policy as needed.

To allow theU.S. Salesgroup to store files containing information subject to theGeneral Data Protection Regulation (GDPR)in their OneDrive accounts while keeping other GDPR restrictions intact, follow these steps:

Create a Security Group:

Log in to theMicrosoft 365 admin center.

Navigate toGroupsand create a new security group called''U.S. Sales''.

Configure OneDrive Sharing Settings:

Go to theSettings > Org settingspage.

On theServicestab, selectMicrosoft 365 on the web.

Choose whether to let users open files stored in third-party storage services in Microsoft 365 on the web.Ensure this setting aligns with your organization's GDPR requirements1.

Set Specific Sharing Permissions:

Set the default OneDrive share type to''Specific People''under theSharingmenu in the OneDrive admin area.

Right-click the folder inOneDrive online, clickShare.

Click themore button (three dots)in theSend Linkheader.

ClickManage Access.

ClickGrant Access, then add the''U.S. Sales''security group.This access will apply only to that group2.

By following these steps, theU.S. Salesgroup will be able to store GDPR-related files in their OneDrive accounts while maintaining compliance with other GDPR restrictions

To prevent the folderC:\app1\datafrom being monitored byEndpoint Data Loss Prevention (DLP), follow these steps:

Configure File Path Exclusions:

Open theMicrosoft Purview compliance portal.

Navigate toData loss prevention>Overview>Data loss prevention settings>Endpoint settings.

Look for theFile path exclusionssection.

Add an exclusion for the pathC:\app1\data.

Files within this folder will not be audited or subject to DLP policy enforcement12.

Remember to validate this configuration and ensure that the folder is excluded from DLP monitoring

To create a retention policy for Microsoft Teams that meets the specified requirements, follow these steps:

Sign in to the Microsoft 365 compliance center:

Log in to the Office 365 Admin Portal.

Visit the Microsoft 365 compliance center.

Navigate to Retention Policies:

SelectPolicies, then click onRetention.

Create a New Retention Policy:

Click onNew retention policy.

Provide aNamefor your new retention policy (e.g., ''Sales Teams Retention Policy'').

Optionally, add aDescription.

Select the Location:

Choose the location to which the policy will be applied. In this case, selectMicrosoft Teams.

Configure Retention Settings:

Set the retention period to5 yearsfrom the date items are created.

Specify whether you want to retain or delete the content after the retention period.

Apply the Policy:

Save your changes.

This policy will now apply to Microsoft Teams chat and channel messages for users with a department attribute of ''Sales,'' retaining items for five years before automatic deletion

To set up a retention policy for Microsoft SharePoint files containing the word ''Falcon,'' follow these steps:

Create a Retention Label:

Retention labels allow you to specify retention periods for content. Go to your SharePoint site or library where you want to apply the policy.

Open the document library settings.

Under ''Permissions and Management,'' select ''Apply label to items in this list or library.''

Choose the retention label that corresponds to the desired retention period (e.g., ''Falcon Retention - 2 years'').

Configure the Retention Label:

Specify the retention period (in this case,2 years).

Define the action to be taken after the retention period (e.g., move to recycle bin).

Apply the Retention Label:

Tag the relevant content (files containing the word ''Falcon'') with the retention label.

The policy will automatically retain the files for two years from their creation date and then delete them.

To retain all Microsoft Exchange items in Alex Wilber's mailbox that contain the word ''Falcon'' and were created in the year 2021, follow these steps:

Create a Retention Policy:

Sign in to theMicrosoft 365 compliance center.

Navigate toPoliciesand click onRetention.

Create a new retention policy (e.g., ''Falcon Retention 2021'').

Specify the retention period (e.g.,2 yearsfrom the creation date).

Set the condition to include items containing the word ''Falcon.''

Apply the Retention Policy to Alex Wilber's Mailbox:

Assign the retention policy to Alex Wilber's mailbox.

Ensure that the policy targets items created in the year 2021.

Validate the Policy:

Test the policy thoroughly to ensure it correctly retains the specified items.

Monitor the mailbox to verify that the retention actions are enforced.

To retain all Microsoft Exchange items in Alex Wilber's mailbox that contain the word ''Falcon'' and were created in the year 2021, follow these steps:

Create a Retention Policy:

Sign in to theMicrosoft 365 compliance center.

Navigate toPoliciesand click onRetention.

Create a new retention policy (e.g., ''Falcon Retention 2021'').

Specify the retention period (e.g.,2 yearsfrom the creation date).

Set the condition to include items containing the word ''Falcon.''

Apply the Retention Policy to Alex Wilber's Mailbox:

Assign the retention policy to Alex Wilber's mailbox.

Ensure that the policy targets items created in the year 2021.

Validate the Policy:

Test the policy thoroughly to ensure it correctly retains the specified items.

Monitor the mailbox to verify that the retention actions are enforced.