Implement Information Protection for Windows, File Shares, and Exchange SC-401 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   You are configuring the Microsoft Purview Information Protection scanner to run against a file share that contains both sensitive and non-sensitive data. The scanner must only label files that match a specific sensitive info type, and it must not modify files that do not match. What should you configure?

   • AUse the scanner's 'offline' mode to label files without connecting to the network.
   • BSet the scanner policy to use a label that applies automatically based on sensitive info types.
   • CSet the scanner to label all files with the same label regardless of content.
   • DConfigure the scanner to run in discovery mode and manually review all files.
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   A multinational company uses Microsoft Purview Advanced Message Encryption. They need to revoke access to an encrypted email that was sent to external recipients. The email was sent with a custom template that has an expiration date of 30 days. What must be true to revoke access?

   • AThe email must be sent using the 'Encrypt-Only' OME template.
   • BThe email must be sent from a shared mailbox.
   • CThe email must be sent to recipients within the same organization.
   • DThe email must have been sent with a custom template that supports revocation.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   Contoso Pharmaceuticals has 2,000 Windows 10/11 devices. They plan to deploy the Microsoft Purview Information Protection client to automatically label documents containing patient data. The compliance team wants to ensure that users can manually override auto-applied labels, but the override must be logged for auditing. They also want to minimize user disruption during rollout. What should you configure?

   • ADeploy the client with default settings and rely on the built-in Office 365 auto-labeling for Exchange and SharePoint, which will also cover local files.
   • BCreate a sensitivity label policy that auto-applies labels based on sensitive info types, and set the label policy to require a justification when users change the label.
   • CConfigure a PowerShell script to apply labels to files in known folders, and disable user interaction entirely to prevent overrides.
   • DUse the Azure Information Protection unified labeling client in read-only mode so users can see labels but cannot change them.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A legal firm uses Microsoft Purview Advanced Message Encryption. They sent an encrypted message to an external client, but the client's device was lost. The firm needs to prevent the client from accessing the message and also prevent the client from forwarding it. What should you do?

   • AUse a mail flow rule to block the client's email address from receiving future messages.
   • BSend a new email to the client asking them to delete the message.
   • CChange the client's password in your tenant to lock them out.
   • DRevoke access to the message using the Exchange admin center, and ensure the message was sent with a 'Do Not Forward' template.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of the Microsoft Purview Information Protection client for Windows?

   • ATo enable users to classify and protect sensitive files and emails by applying sensitivity labels directly from Office apps and Windows Explorer
   • BTo provide a unified interface for managing all Microsoft 365 compliance policies
   • CTo replace the need for Azure Information Protection unified labeling client in all environments
   • DTo automatically encrypt all files stored on a Windows device without user interaction
   Reveal Solution Discussion Select an answer first