Create and Configure Data Loss Prevention Policies SC-401 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which component must be configured in Microsoft Purview to provide risk levels that Adaptive Protection can use in DLP policies?

   • AInsider risk management
   • BAzure Active Directory Identity Protection
   • CData classification service
   • DMicrosoft Defender for Cloud Apps
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When creating a DLP policy in the Microsoft Purview compliance portal, which component defines the specific conditions that trigger an action, such as detecting a credit card number?

   • ARule
   • BLocation
   • CAction
   • DPolicy
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A security team needs to assign the minimum permissions required for an administrator to view DLP policy reports and alerts, but not create or modify policies. Which role should be assigned?

   • ADLP Compliance Management
   • BSecurity Administrator
   • CCompliance Data Administrator
   • DSecurity Reader
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A company wants to design a DLP policy that prevents credit card numbers from being shared externally via email, but allows internal sharing for legitimate business purposes. Which design element is most important to achieve this requirement?

   • ASetting the policy to block all sharing of credit card numbers, regardless of the recipient.
   • BCreating a policy that applies to all users but only to email messages that contain more than five credit card numbers.
   • CUsing a policy that only audits external sharing, without blocking, to avoid disrupting business.
   • DConfiguring the policy to apply only to external recipients, using conditions that identify the sender and recipient domains.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   Your organization uses Microsoft Defender for Cloud Apps to monitor files in Box and SharePoint. You have a DLP policy in Microsoft Purview that blocks external sharing of sensitive data in SharePoint. You now need to enforce the same protection for files in Box. What should you do?

   • ACreate a new DLP policy in Microsoft Purview and select Box as a location.
   • BUse a sensitivity label to protect files in Box and rely on the existing DLP policy for SharePoint.
   • CExtend the existing Microsoft Purview DLP policy to include Box as a location.
   • DCreate a file policy in Defender for Cloud Apps that uses content inspection to detect the same sensitive info types and applies a governance action to block sharing.
   Reveal Solution Discussion Select an answer first