Microsoft Certified:Information Security Administrator Associate
Domain 3Objective 2
Manage Information Security Alerts and Activities SC-401 Practice Questions (Page 6)
Part of the Manage risks, alerts, and activities domain, which accounts for 30–35% of the SC-401 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
9concepts
30–35%of the exam
Questions 26–30
- 26
Which of the following is a key feature of Insider Risk Management in Microsoft Purview?
Select an answer first - 27
In Activity Explorer, which of the following is a typical filter you can apply to narrow down activities?
Select an answer first - 28
Which Microsoft security solution generates file policy alerts based on activities in cloud apps?
Select an answer first - 29
What is the purpose of configuring an audit retention policy in Microsoft Purview?
Select an answer first - 30
During an insider risk investigation, the legal team needs to find all emails and documents related to a specific project that a departing employee may have accessed. You need to locate this content across Exchange Online and SharePoint Online. What should you use?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-401” is a trademark of its owner, used for identification only.