Implement and Manage Sensitivity Labels in Microsoft Purview SC-401 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the first step in creating a sensitivity label in the Microsoft Purview compliance portal?

   • AClick 'Create a label'
   • BPublish the label
   • CSelect the parent label
   • DDefine the label's scope
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the role of Microsoft Defender for Cloud Apps in applying sensitivity labels?

   • AIt creates sensitivity labels in Microsoft Purview
   • BIt applies sensitivity labels to files stored in third-party cloud apps
   • CIt manages user permissions for labels
   • DIt publishes labels to users
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   Your organization has a strict separation of duties requirement: the team that creates sensitivity labels must not be able to publish them, and the team that publishes labels must not be able to create them. You need to assign roles in Microsoft Purview to meet this requirement. What should you do?

   • AAssign the Information Protection Administrator role to the creation team and the Sensitivity Label Administrator role to the publishing team.
   • BCreate custom roles in Microsoft Purview: one with permissions to create and edit labels but not publish, and another with permissions to publish labels but not create or edit them.
   • CAssign the Sensitivity Label Administrator role to the creation team and the Information Protection Reader role to the publishing team.
   • DAssign the Information Protection Administrator role to the creation team and the Compliance Administrator role to the publishing team.
   Reveal Solution Discussion Select an answer first
5. 14application · easy

   A new junior administrator needs to create and publish sensitivity labels in the Microsoft Purview compliance portal, but should not be able to manage other compliance features like DLP or retention. What role should you assign?

   • ASecurity Reader
   • BGlobal Administrator
   • CCompliance Administrator
   • DInformation Protection Admin
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following can be defined as the scope of a sensitivity label?

   • AFiles, emails, meetings, and groups/sites
   • BGroups and sites only
   • CFiles, emails, and meetings
   • DFiles and emails only
   Reveal Solution Discussion Select an answer first