A company has enabled OCR for the tenant and created a custom sensitive info type for 'Passport Numbers' with OCR enabled. They notice that scanned passports are not being detected, but digital passports are. What is the most likely cause?

The OCR service is not processing the scanned files because they are too large.

The OCR feature is not enabled for the specific sensitive info type, even though it is enabled for the tenant.

The scanned files are in a format that OCR does not support, such as PNG.

The scanned files are stored in SharePoint Online, which does not support OCR.

A retail company needs to detect credit card numbers in documents and emails. They have a database of known compromised card numbers that they want to flag specifically. They want to use exact data match (EDM) to ensure only the exact compromised numbers are detected, not any valid card number. What is the first step you must perform to implement EDM?

Create a custom sensitive info type with a regex for credit card numbers and then upload the compromised numbers as a keyword list.

Define the schema for the sensitive data table, including the column for credit card numbers, and upload the hashed data using the EDM upload tool.

Enable OCR for the tenant and then create a trainable classifier to recognize compromised card numbers.

Use the built-in 'Credit Card Number' sensitive info type and configure a condition to match only the compromised numbers.

Why is it important to regularly review and update custom sensitive info types?

To change the sensitivity labels applied to documents

To increase the number of false positives in detection

To delete all custom types and rely only on built-in types

To ensure they continue to accurately identify sensitive data as organizational data formats evolve

What is the purpose of enabling OCR (Optical Character Recognition) for sensitive info types?

To detect sensitive information in scanned images and PDFs

To apply watermarks to scanned documents

To compress images to reduce storage

A company deployed a trainable classifier to identify engineering change orders. After three months, the classifier is missing many new change orders because the format has evolved. The admin wants to improve accuracy without recreating the classifier from scratch. What should they do?

Switch to a custom sensitive info type with a regex for 'change order'.

Increase the classifier's confidence threshold to reduce false negatives.

Add new sample documents to the classifier's seed pool and retrain it.

Delete the classifier and create a new one with a broader name.

Microsoft Certified:Information Security Administrator Associate

Domain 1Objective 1

Implement and Manage Data Classification SC-401 Practice Questions (Page 6)

Part of the Implement information protection domain, which accounts for 30–35% of the SC-401 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

11concepts

30–35%of the exam

Questions 26–30

26expert · hard
A company has enabled OCR for the tenant and created a custom sensitive info type for 'Passport Numbers' with OCR enabled. They notice that scanned passports are not being detected, but digital passports are. What is the most likely cause?
Select an answer first
27application · medium
A retail company needs to detect credit card numbers in documents and emails. They have a database of known compromised card numbers that they want to flag specifically. They want to use exact data match (EDM) to ensure only the exact compromised numbers are detected, not any valid card number. What is the first step you must perform to implement EDM?
Select an answer first
28foundation · easy
Why is it important to regularly review and update custom sensitive info types?
Select an answer first
29foundation · easy
What is the purpose of enabling OCR (Optical Character Recognition) for sensitive info types?
Select an answer first
30expert · hard
A company deployed a trainable classifier to identify engineering change orders. After three months, the classifier is missing many new change orders because the format has evolved. The admin wants to improve accuracy without recreating the classifier from scratch. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-401” is a trademark of its owner, used for identification only.