Which of the following is required to enable Microsoft Purview Message Encryption in an organization?

An Azure Rights Management service (Azure RMS) license

A public certificate from a trusted CA for each user

A separate third-party encryption gateway

Which of the following is a key design consideration when planning Microsoft Purview Message Encryption?

The sensitivity labels and protection settings that will be applied to emails

The number of mailboxes in the organization

The brand of the recipient's email client

The physical location of the email servers

What is the result of applying a sensitivity label that includes encryption to a file using the Information Protection client?

The file is converted to a PDF and encrypted

The file is moved to a protected folder on the device

The file is encrypted and access is restricted according to the label's protection settings

The file is uploaded to Microsoft 365 for scanning

An organization wants to use Microsoft Purview Message Encryption but needs to ensure that external recipients can read the encrypted email without creating a Microsoft account. What should you configure?

Use the 'Encrypt' OME template and enable the one-time passcode feature.

Use S/MIME to encrypt the email.

Use Microsoft Purview Advanced Message Encryption with a custom template.

Use the 'Do Not Forward' OME template.

A law firm uses Windows 10 devices with the Microsoft Purview Information Protection client. They need to ensure that any document containing client legal advice is automatically labeled 'Confidential' when saved to a local drive. However, they want to avoid labeling documents that merely mention 'attorney' in a generic context. What should you do?

Configure a retention label to mark all documents containing the word 'attorney' as confidential.

Use Windows Information Protection (WIP) to automatically label all files created by the legal department.

Create a sensitive info type for legal advice patterns and configure a client-side auto-labeling policy that applies the 'Confidential' label when the pattern is detected.

Enable the default 'Attorney-Client Privilege' sensitive info type and apply it to all files via a file share scanner.

Microsoft Certified:Information Security Administrator Associate

Domain 1Objective 3

Implement Information Protection for Windows, File Shares, and Exchange SC-401 Practice Questions (Page 6)

Part of the Implement information protection domain, which accounts for 30–35% of the SC-401 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

8concepts

30–35%of the exam

Questions 26–30

26foundation · easy
Which of the following is required to enable Microsoft Purview Message Encryption in an organization?
Select an answer first
27foundation · easy
Which of the following is a key design consideration when planning Microsoft Purview Message Encryption?
Select an answer first
28foundation · easy
What is the result of applying a sensitivity label that includes encryption to a file using the Information Protection client?
Select an answer first
29application · medium
An organization wants to use Microsoft Purview Message Encryption but needs to ensure that external recipients can read the encrypted email without creating a Microsoft account. What should you configure?
Select an answer first
30application · medium
A law firm uses Windows 10 devices with the Microsoft Purview Information Protection client. They need to ensure that any document containing client legal advice is automatically labeled 'Confidential' when saved to a local drive. However, they want to avoid labeling documents that merely mention 'attorney' in a generic context. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-401” is a trademark of its owner, used for identification only.