Implement and Monitor Microsoft Purview Endpoint DLP SC-401 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   When configuring an advanced DLP rule for devices, which action can you specify to prevent a user from copying sensitive data to a removable USB drive?

   • AAudit the activity
   • BRestrict access to the file
   • CBlock the activity 'Copy to removable storage'
   • DBlock access to the file
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   Your organization is planning to deploy Endpoint DLP to 500 Windows 10 Pro devices. The devices are managed by Microsoft Intune and are already enrolled in Microsoft Entra ID. You need to ensure that Endpoint DLP can monitor file activities on these devices. What is the primary requirement you must verify?

   • AThe devices have at least 16 GB of RAM and a solid-state drive.
   • BThe devices are joined to an on-premises Active Directory domain.
   • CThe devices are running a supported Windows 10/11 version and have the Microsoft Purview extension installed.
   • DThe devices have BitLocker enabled and are compliant with Intune policies.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of Just-in-Time Protection in Microsoft Purview Endpoint DLP?

   • ATo provide real-time blocking of sensitive data exfiltration attempts
   • BTo schedule periodic scans of the device for sensitive content
   • CTo provide a temporary exemption from DLP policies for troubleshooting
   • DTo automatically encrypt all files on the device
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company has a DLP policy that blocks copying sensitive data to USB drives. They have a group of users who work from home and use VPN to access corporate resources. They notice that the DLP policy is not being enforced on these remote devices. What is the most likely cause?

   • AThe DLP policy is configured to only apply when the device is connected to the corporate network.
   • BThe users are not in the policy's scope because they are remote.
   • CThe VPN connection is blocking the DLP policy updates.
   • DThe remote devices are not onboarded to Microsoft Purview.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   Your organization is about to deploy Endpoint DLP to a group of Windows 11 devices. You have already enabled device onboarding in the compliance portal. However, you notice that the devices are not appearing in the device list. What is the most likely reason?

   • AThe devices are not joined to Microsoft Entra ID.
   • BThe devices are not licensed for Microsoft 365 E5.
   • CThe Microsoft Purview extension has not been installed on the devices.
   • DThe DLP policy has not been published to the devices.
   Reveal Solution Discussion Select an answer first