Create and Configure Data Loss Prevention Policies SC-401 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of Adaptive Protection in Microsoft Purview DLP?

   • ATo encrypt all sensitive files automatically, regardless of the user's behavior.
   • BTo allow users to override DLP policy blocks by providing a business justification.
   • CTo provide a dashboard for monitoring DLP policy compliance across the organization.
   • DTo automatically adjust DLP policy actions based on the user's risk level determined by insider risk management.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A security administrator is designing a DLP policy for a healthcare organization that must protect patient records while allowing finance staff to process billing data. Which approach best aligns the policy design with the organization's specific requirements?

   • ACreate a single broad policy that blocks all sensitive data types for all users to ensure maximum protection.
   • BUse a single policy that only applies to the finance department, since they handle billing data that includes patient information.
   • CDefine separate policies for each department, with rules that match the sensitive data types they handle and appropriate actions for their workflows.
   • DConfigure the policy to audit all data sharing without any restrictions, then review logs to identify potential issues later.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   Your organization's DLP policies are managed by a team of compliance analysts. They need to view DLP policy matches and incidents, but they should not be able to create or modify policies. Which role should you assign to these analysts?

   • ASecurity Reader
   • BCompliance Administrator
   • CDLP Compliance Management
   • DDLP Compliance Viewer
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to use Adaptive Protection to automatically adjust DLP restrictions for users who are at high risk of data exfiltration. They have enabled Insider Risk Management and have a DLP policy that blocks external sharing of sensitive data. What must you configure to ensure that only high-risk users get a stricter DLP policy?

   • ACreate an adaptive scope that references the Insider Risk Management risk level, then add that scope to a DLP policy with stricter actions.
   • BUse a PowerShell script to periodically assign the high-risk users to a distribution group, then scope the DLP policy to that group.
   • CCreate a separate DLP policy for each user in the high-risk group.
   • DCreate a DLP policy that applies to all users and set the action to block for everyone.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A DLP policy is being created to protect sensitive data in Microsoft Teams. Which location should be selected in the policy to cover Teams chat and channel messages?

   • ATeams chat and channel messages
   • BExchange email
   • CSharePoint sites
   • DDevices
   Reveal Solution Discussion Select an answer first