Implement and Manage Data Classification SC-401 Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   When translating organizational requirements into sensitive info types, what is the first step an administrator should take?

   • ACreate a custom sensitive info type from scratch
   • BConfigure a retention label for the data
   • CDeploy a trainable classifier to identify the data
   • DCheck if an existing built-in sensitive info type already matches the requirement
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A company created a custom sensitive info type for project codes that originally followed the pattern 'PRJ-###'. Over time, the format changed to 'PRJ-####'. The admin needs to update the type to match the new format. What should they do?

   • ACreate a second custom sensitive info type for the new format and leave the old one unchanged.
   • BDelete the existing type and create a new one with the same name.
   • CEdit the existing custom sensitive info type and change the regex to 'PRJ-\d{4}'.
   • DUse a trainable classifier to learn the new format automatically.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A multinational company must comply with GDPR and needs to detect personal data such as email addresses and phone numbers in documents stored in Microsoft 365. They want to use built-in sensitive info types where possible to reduce false positives. What should you do first?

   • ACreate custom sensitive info types for email and phone numbers to match the company's specific formats.
   • BUse document fingerprinting with a sample of personal data documents.
   • CUse the built-in 'EU GDPR' sensitive info type, which includes email and phone number patterns.
   • DUse a trainable classifier to detect personal data.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A law firm receives contracts in PDF format that are often scanned images. The contracts contain a clause with the text 'Confidential Engagement' followed by a matter number like 'M-2024-00123'. The firm wants to automatically classify these scanned contracts as confidential. They have already enabled OCR for the tenant. What should you do to ensure the scanned contracts are detected?

   • ACreate a trainable classifier and train it with sample scanned contracts.
   • BUse the built-in 'Contract' sensitive info type, which already detects scanned contract clauses.
   • CCreate a custom sensitive info type with a regex pattern for 'Confidential Engagement M-\d{4}-\d{5}' and ensure the 'OCR' option is enabled for that type.
   • DEnable OCR in the Microsoft 365 compliance portal and create a retention label for contracts.
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A manufacturing company uses a standard 'Request for Quotation' (RFQ) form that is filled out by suppliers. The form has a fixed layout but variable data such as supplier name, part number, and price. The company wants to automatically classify any submitted RFQ as 'Confidential'. They have a sample of the blank RFQ form. What should you use?

   • AUse the built-in 'Request for Quotation' sensitive info type.
   • BUse a trainable classifier trained on filled-out RFQ examples.
   • CUse document fingerprinting with the blank RFQ form as the fingerprint.
   • DCreate a custom sensitive info type with a regex for part numbers.
   Reveal Solution Discussion Select an answer first