Implement and Monitor Microsoft Purview Endpoint DLP SC-401 Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   Your organization is deploying Endpoint DLP to a mix of Windows and macOS devices. You have a limited number of licenses that support Endpoint DLP. You need to ensure that the most critical data is protected first. You have identified that the finance team handles the most sensitive data. However, the finance team uses macOS devices, while other teams use Windows. What should you do?

   • AOnboard all devices at once by purchasing additional licenses.
   • BOnboard only devices that are already enrolled in Microsoft Intune.
   • CPrioritize onboarding the finance team's macOS devices because they handle the most sensitive data.
   • DPrioritize onboarding Windows devices because macOS support is limited and less reliable.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which Endpoint DLP setting determines the maximum size of a file that can be inspected by the DLP agent on a device?

   • AFile size limit
   • BPerformance threshold
   • CFile extension filter
   • DScan frequency
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a key benefit of monitoring endpoint activities with Microsoft Purview Endpoint DLP?

   • AIt automatically patches operating system vulnerabilities
   • BIt optimizes device battery life
   • CIt provides visibility into sensitive data usage across devices
   • DIt prevents all malware infections on endpoints
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   Your organization wants to reduce false positives in Endpoint DLP alerts. Users frequently copy product names that resemble sensitive info types. You need to adjust the Endpoint DLP settings to minimize unnecessary alerts while still protecting actual sensitive data. What should you do?

   • ADisable the 'Endpoint DLP' policy for all users except a pilot group.
   • BRemove the sensitive info types from the policy and rely on manual review of all files.
   • CIncrease the confidence level threshold for the sensitive info types used in the DLP policies.
   • DChange the action from 'Block' to 'Audit only' for all rules.
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   Your DLP policy for endpoints currently blocks all uploads to personal cloud storage. Users are complaining that they need to upload non-sensitive files for legitimate work. You need to allow non-sensitive uploads while still blocking sensitive ones. You also need to ensure that users can override the block for sensitive files only when they provide a business justification. What should you configure?

   • AModify the rule to include the sensitive info type and enable 'User override' with 'Business justification'.
   • BRemove the sensitive info type from the rule and enable 'User override' with 'Business justification'.
   • CCreate a second rule that allows uploads to specific approved cloud services.
   • DChange the action to 'Audit only' and enable 'User override'.
   Reveal Solution Discussion Select an answer first