Which component is required on Windows systems before deploying the Microsoft Purview Information Protection client?

A Windows Server Update Services (WSUS) infrastructure

A Microsoft 365 E5 license assigned to every user

A sensitivity label policy published to the user or device

An on-premises Active Directory domain joined to Azure AD

A logistics company has a file server with 2 million files. They need to classify files containing personal data with the 'Personal' label. They want to run the scanner only on weekends to avoid impacting business hours. They also want to receive a report of files that were labeled. What should you configure?

Use a PowerShell script to label files and send a custom report via email.

Run the scanner continuously and rely on throttling to avoid impact.

Use the scanner in discovery mode only and manually label files based on the report.

Create a scanner policy with a schedule for weekends and enable reporting in the scanner's configuration.

A global law firm uses Exchange Online. They need to send encrypted emails to external clients, some of whom use non-Microsoft email services. The firm requires that clients can read and reply to encrypted messages without creating a Microsoft account. They also need to expire messages after 30 days and revoke access if a client relationship ends. What should you design?

Use a mail flow rule to encrypt messages with a sensitivity label that has an expiration policy.

Use S/MIME with certificates issued to each client, and set the certificate expiration to 30 days.

Use standard Microsoft Purview Message Encryption with the 'Encrypt-Only' template and rely on manual revocation via the portal.

Use Microsoft Purview Advanced Message Encryption with a custom template that supports one-time passcode authentication, expiration, and revocation.

A financial services company has a large on-premises file server containing legacy documents that were never classified. They have deployed the Microsoft Purview Information Protection client to all Windows workstations. The compliance team wants to apply the 'General' label to all unlabeled documents on the file server without requiring users to open each file. What is the most efficient approach?

Instruct users to open each file and manually apply the 'General' label using the Office apps.

Use a PowerShell script that copies files to SharePoint Online and applies labels via the SharePoint UI.

Run the Microsoft Purview Information Protection scanner against the file server to discover and label unlabeled files.

Configure a Windows scheduled task to run the client's label command on each file at login.

After installing the Microsoft Purview Information Protection client, what must an administrator do to ensure users see the correct sensitivity labels in Office apps?

Restart the Office apps on each user's computer

Reinstall the client on each computer

Configure a conditional access policy in Azure AD

Assign a Power BI license to each user

Microsoft Certified:Information Security Administrator Associate

Domain 1Objective 3

Implement Information Protection for Windows, File Shares, and Exchange SC-401 Practice Questions (Page 4)

Part of the Implement information protection domain, which accounts for 30–35% of the SC-401 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

8concepts

30–35%of the exam

Questions 16–20

16foundation · easy
Which component is required on Windows systems before deploying the Microsoft Purview Information Protection client?
Select an answer first
17application · medium
A logistics company has a file server with 2 million files. They need to classify files containing personal data with the 'Personal' label. They want to run the scanner only on weekends to avoid impacting business hours. They also want to receive a report of files that were labeled. What should you configure?
Select an answer first
18expert · hard
A global law firm uses Exchange Online. They need to send encrypted emails to external clients, some of whom use non-Microsoft email services. The firm requires that clients can read and reply to encrypted messages without creating a Microsoft account. They also need to expire messages after 30 days and revoke access if a client relationship ends. What should you design?
Select an answer first
19application · medium
A financial services company has a large on-premises file server containing legacy documents that were never classified. They have deployed the Microsoft Purview Information Protection client to all Windows workstations. The compliance team wants to apply the 'General' label to all unlabeled documents on the file server without requiring users to open each file. What is the most efficient approach?
Select an answer first
20foundation · easy
After installing the Microsoft Purview Information Protection client, what must an administrator do to ensure users see the correct sensitivity labels in Office apps?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-401” is a trademark of its owner, used for identification only.

Implement Information Protection for Windows, File Shares, and Exchange SC-401 Practice Questions (Page 4)

Questions 16–20

Which component is required on Windows systems before deploying the Microsoft Purview Information Protection client?

After installing the Microsoft Purview Information Protection client, what must an administrator do to ensure users see the correct sensitivity labels in Office apps?

Keep studying — Implement information protection