An organization uses Exchange Online. They need to automatically encrypt emails that contain credit card numbers when sent to external recipients. What should you configure?

Use Microsoft Purview Advanced Message Encryption to set an expiration date.

Configure a data loss prevention policy that blocks the email.

Create a mail flow rule that applies the 'Encrypt' OME template when the message contains sensitive info types.

Enable S/MIME for all users and require it for external emails.

How does an administrator implement Microsoft Purview Advanced Message Encryption for emails that contain sensitive information?

By enabling a global setting in the Exchange Admin Center that encrypts all emails

By configuring a DNS record for each recipient domain

By installing a third-party plugin in Outlook

By creating a mail flow rule that applies a sensitivity label or encryption template to matching emails

You are deploying the Microsoft Purview Information Protection client to a Windows environment. You need to ensure that users can apply labels to files in File Explorer, but you also need to prevent users from removing labels that are marked as 'classified'. What should you configure?

Use a label that is configured as 'Do not allow users to remove the label'.

Use a DLP policy to block the removal of labels.

Set the label policy to require justification for removing labels.

Configure the client to hide the 'Remove label' option.

Which component is required to run the Microsoft Purview Information Protection scanner?

A Microsoft 365 E5 license for every file being scanned

An Azure SQL database for storing scan results

A Windows Server with the scanner software installed

A VPN connection to the Microsoft Purview service

A retail company is planning to deploy the Microsoft Purview Information Protection client to 5,000 Windows devices. They have a mix of Windows 10 and Windows 11, and some users work offline. They want to ensure that labels are available even when users are not connected to the network. What should you include in the deployment plan?

Use a GPO to disable offline labeling to ensure policy compliance.

Deploy the client only to users who have internet access.

Require users to connect to the VPN before they can label any document.

Pre-configure the client with the sensitivity labels and enable offline labeling capabilities.

Microsoft Certified:Information Security Administrator Associate

Domain 1Objective 3

Implement Information Protection for Windows, File Shares, and Exchange SC-401 Practice Questions (Page 5)

Part of the Implement information protection domain, which accounts for 30–35% of the SC-401 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

8concepts

30–35%of the exam

Questions 21–25

21application · medium
An organization uses Exchange Online. They need to automatically encrypt emails that contain credit card numbers when sent to external recipients. What should you configure?
Select an answer first
22foundation · easy
How does an administrator implement Microsoft Purview Advanced Message Encryption for emails that contain sensitive information?
Select an answer first
23expert · medium
You are deploying the Microsoft Purview Information Protection client to a Windows environment. You need to ensure that users can apply labels to files in File Explorer, but you also need to prevent users from removing labels that are marked as 'classified'. What should you configure?
Select an answer first
24foundation · easy
Which component is required to run the Microsoft Purview Information Protection scanner?
Select an answer first
25application · medium
A retail company is planning to deploy the Microsoft Purview Information Protection client to 5,000 Windows devices. They have a mix of Windows 10 and Windows 11, and some users work offline. They want to ensure that labels are available even when users are not connected to the network. What should you include in the deployment plan?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-401” is a trademark of its owner, used for identification only.