Implement and Monitor Microsoft Purview Endpoint DLP SC-401 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A financial firm wants to protect sensitive client data on endpoints. They want to allow users to work with files normally, but if a user attempts to copy sensitive data to a removable drive, they want the user to provide a business justification before the action is allowed. Which Endpoint DLP feature should you configure?

   • AConfigure a 'Block' action without any override option.
   • BSet the policy action to 'Block' with 'Allow override' and require a business justification.
   • CEnable 'Just-in-time protection' in the policy settings.
   • DUse a 'Warn' action and rely on the user to self-report the incident.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a Microsoft Purview DLP policy, which condition can be used to restrict the sharing of a sensitive file to a specific set of users or groups?

   • ACondition: 'Content contains' and then specify a sensitive info type
   • BCondition: 'Device is' and then specify the device name
   • CCondition: 'File is shared with' and then specify the users or groups
   • DCondition: 'File extension is' and then specify the file type
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In the Endpoint DLP settings within the Microsoft Purview compliance portal, which setting controls whether users can override DLP policy blocks with a business justification?

   • AUser notification
   • BIncident reporting
   • CBlock override
   • DAllow override
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   Your company has a mix of Windows and macOS devices. You need to ensure that when a user attempts to upload a file containing sensitive data to a personal webmail service, the action is blocked immediately, even if the user has not yet opened the file in an application. Which Endpoint DLP feature should you configure?

   • AJust-in-time protection with file-level blocking for cloud upload activities.
   • BA policy that requires user justification before the upload is allowed.
   • CA device group that excludes macOS devices from the policy.
   • DA DLP rule that audits the upload and generates an alert for later review.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company plans to deploy Endpoint DLP to Windows 10 Enterprise devices that are Microsoft Entra joined. The security team wants to block copying sensitive files to USB drives and monitor attempts. They have already enabled unified auditing. What should you do next to prepare the devices for Endpoint DLP?

   • AInstall the Microsoft 365 Apps for enterprise on each device and verify the device is compliant with Intune policies.
   • BDeploy a PowerShell script that enables the 'AllowEndpointsDLP' registry key on each device and restart the device.
   • COnboard the devices to Microsoft Purview by using the device onboarding script or a configuration manager, then verify the devices appear as 'Onboarded' in the portal.
   • DCreate a Microsoft Entra Conditional Access policy that requires the device to be marked as compliant before accessing Microsoft 365 services.
   Reveal Solution Discussion Select an answer first