SC-400 PDF Exam Material 2026 Realistic SC-400 Dumps Questions
Updated Microsoft SC-400 Dumps – PDF & Online Engine
Microsoft SC-400 (Microsoft Information Protection Administrator) certification exam is designed for individuals who are interested in validating their knowledge and skills in information protection and governance. SC-400 exam assesses the candidate's ability to implement and manage information protection solutions, monitor and respond to security incidents, and ensure compliance with data protection regulations. Microsoft Information Protection Administrator certification is ideal for professionals working in the field of information security or those who are responsible for managing data protection policies within their organization.
Microsoft SC-400 Exam is designed to assess the ability of candidates to implement and manage Microsoft Information Protection solutions across various Microsoft 365 workloads. It covers a wide range of topics, including data classification, labeling, and protection, data loss prevention, and data governance, among others. It is a comprehensive exam that requires a deep understanding of the Microsoft 365 ecosystem and its various components.
Microsoft SC-400 certification exam is a part of the Microsoft Certified: Information Protection Administrator Associate certification track. It is intended for individuals who have experience in designing, implementing, and managing Microsoft Information Protection solutions. Candidates for this certification exam should also have a fundamental understanding of data classification, governance, and regulatory compliance requirements.
NEW QUESTION # 180
You have a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com.
OneDrive stores files that are shared with external users. The files are configured as shown in the following table.
You create a data loss prevention (DLP) policy that applies to the content stored in OneDrive accounts. The policy contains the following three rules:
Rule1:
* Conditions: Label1. Detect content that's shared with people outside my organization
* Actions: Restrict access to the content for external users
* User notifications: Notify the user who last modified the content
* User overrides: On
* Priority: 0
Rule2:
* Conditions: Label! or Label2
* Actions: Restrict access to the content
* Priority: 1
Rule3:
* Conditions: Label2. Detect content that's shared with people outside my organization
* Actions: Restrict access to the content for external users
* User notifications: Notify the user who last modified the content
* User overrides: On
* Priority: 2
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 181
At the end of a project you upload project documents to a Microsoft SharePoint Online library that contains many fifes. Files that have the following naming format must be labeled as Project I
* aei_AA989.docx
* bd_WSOgadocx
* cei_DLF112-docx
* ebc_QQ4S4.docx
* ecc_BB565.docx
You plan to create an auto-apply retention label policy.
What should you use to identify the files, and which regular expression should you use? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
NEW QUESTION # 182
Your company has two departments named department1 and department2 and a Microsoft 365 E5 subscription.
You need to prevent communication between the users in department1 and the users in department.
How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets.
Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 183
You have a Microsoft 365 E5 tenant that contains the objects shown in the following table.
You need to restore a Microsoft Word document that was deleted from the Sales channel by User 1.
From where can the document be restored, and how long will the document be retained? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 184
Hotspot Question
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
You have the eDiscovery cases shown in the following table.
The eDiscovery cases have the members shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 185
In Microsoft Exchange Online, you have a retention policy named Policy1 that applies a retention tag named Tag1.
You plan to remove Tag1 from Policy1.
What will occur when you remove the tag from Policy1?
- A. The content will remain tagged and the Managed Folder Assistant will process Tag1.
- B. The content will remain tagged, but the Managed Folder Assistant will ignore Tag1.
- C. Tag1 will be removed if Policy1 applied the tag to the content.
Answer: A
Explanation:
When a retention tag is removed from the retention policy applied to a mailbox, the tag is no longer available to the user and can't be applied to items in the mailbox. Existing items that have been stamped with that tag continue to be processed by the Managed Folder Assistant based on those settings and any retention action specified in the tag is applied to those messages.
However, if you delete the tag, the tag definition stored in Active Directory is removed. This causes the Managed Folder Assistant to process all items in a mailbox and restamp the ones that have the removed tag applied. Depending on the number of mailboxes and messages, this process may significantly consume resources on all Mailbox servers that contain mailboxes with retention policies that include the removed tag.
https://learn.microsoft.com/en-us/exchange/security-and-compliance/messaging-records- management/retention-tags-and-policies#removing-or-deleting-a-retention-tag-from-a-retention- policy
NEW QUESTION # 186
You have a Microsoft 365 E5 tenant.
You need to add a new keyword dictionary.
What should you create?
- A. a sensitivity label E3
- B. a trainable classifier
- C. a sensitive info type
- D. a retention policy
Answer: C
NEW QUESTION # 187
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
You create the retention label shown in the following exhibit.
Which users can perform a disposition review of content that has Retention1 applied?
- A. Admin1 and Admin3 only
- B. Admin2 and Admin3 only
- C. Admin2 only
- D. Admin1 and Admin2 only
- E. Admin1, Admin2, and Admin3
- F. Admin3 only
Answer: B
Explanation:
https://learn.microsoft.com/en-us/microsoft-365/compliance/disposition?view=o365-worldwide To successfully access the Disposition tab in the Microsoft Purview compliance portal, users must have the Disposition Management role. From December 2020, this role is now included in the Records Management default role group.
Records management is part of the compliance administrator roles.
https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc- permissions?view=o365-worldwide
NEW QUESTION # 188
You have a Microsoft 365 tenant.
A new regulatory requirement states that all documents containing a patent ID be labeled, retained for 10 years, and then deleted. The policy used to apply the retention settings must never be disabled or deleted by anyone.
You need to implement the regulatory requirement.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Choose three.)
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-preservation-lock?view=o365-worldwide
NEW QUESTION # 189
You have a Microsoft OneDrive for Business folder that contains the files shown in the following table.
In Microsoft Cloud App Security, you create a file policy to automatically apply a classification.
What is the effect of applying the policy?
- A. The policy will apply to only the .docx files. The policy will classify only 100 files daily.
- B. The policy will apply to all the files. The policy will classify only 100 files daily.
- C. The policy will apply to only the .docx and .txt files. The policy will classify the files immediately.
- D. The policy will apply to only the .docx and .txt files. The policy will classify the files within 24 hours.
Answer: A
Explanation:
Explanation
Explanation/Reference:
https://docs.microsoft.com/en-us/cloud-app-security/azip-integration
NEW QUESTION # 190
You have a Microsoft 365 tenant.
A retention hold is applied to all the mailboxes in Microsoft Exchange Online.
A user named User1 leaves your company, and the account of User1 is deleted from Azure Active Directory (Azure AD).
You need to create a new user named User2 and provide User2 with access to the mailbox of User1.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbox?view=o365-worldwide
NEW QUESTION # 191
You have a Microsoft 365 E5 tenant.
Data loss prevention (DLP) policies are applied to Exchange email, SharePoint sites, and OneDrive accounts locations.
You need to use PowerShell to retrieve a summary of the DLP rule matches from the last seven days.
Which PowerShell module and cmdlet should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/powershell/module/exchange/get-dlpdetectionsreport?view=exchange-ps
Topic 1, Fabrikam, Case Study
Overview
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each there may be additional case studies and sections on this exam. You must manage you're your time to ensure that you are able to complete all included on this exam in the time provided.
To answer the questions included in a case study, you will need In reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described In the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab. note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Cloud Environment
Fabrikam has a Microsoft 365 tenant that contains the following resources:
* An Azure Active Directory (Azure AD) tenant that syncs to an on-premises Active Directory domain named corp.fabrikam.com
* Microsoft Cloud App Security connectors configured for all supported cloud applications used by the company Some users have company Dropbox accounts.
Compliance Configuration
Fabrikam has the following in the Microsoft 365 compliance center:
* A data loss prevention (DLP) policy is configured. The policy displays a tooltip to users. Users can provide a business justification to override a DLP policy violation.
* The Azure information Protection unified labeling scanner is installed and configured.
* A sensitivity label named Fabrikam Confidential is configured.
An existing third-party records management system is managed by the compliance department.
Human Resources (HR) Management System
The HR department has an Azure SQL. database that contains employee information. Each employee has a unique 12-character alphanumeric ID. The database contains confidential employed attributes including payroll information, date of birth, and personal contact details.
On-premises Environment
You have an on premises file server that runs Windows Server 2019 and stores Microsoft Office documents in a shared folder named Data.
All end-user computers are joined to the corp.fabrinkam.com domain and run a third-party antimalware application.
Sales Contracts
Users in the sales department receive draft sales contracts from customers by email. The sales contracts are written by the customers and are not in a standard format.
Employment Applications
Employment applications and resumes are received by HR department managers and stored in either mailboxes, Microsoft SharePoint Online sites, OneDrive for Business folders, or Microsoft Teams channels.
The employment application form is downloaded from SharePoint Online and a serial number is assigned to each application.
the resumes are written by the applications and in any format.
HR Requirements
You need to create a DLP policy that will notify the HR department of a DLP policy violation if a document that contains confidential employee attributes is shared externally. The DLP policy must use an Exact Data Match (EDM) classification derived from a CSV export of the HR department database.
The HR department identifies the following requirements for handling employment applications:
* Resumes must be identified automatically based on similarities to other resumes received in the past
* Employment applications and resumes must be deleted automatically two years after the applications are received.
* Documents and emails that contain an application serial number must be identified automatically and marked as an employment application.
Sales Requirements
A sensitivity label named Sales Contract must be applied automatically to all draft and finalized sales contracts.
Compliance Requirements
Fabrikam identifies the following compliance requirements:
* All DLP policies must be applied to computers that run Windows 10, with the least possible changes to the computers.
* Users in the compliance department must view the justification provided when a user receives a tooltip notification for a DLP violation.
* If a document that has the Fabrikam Confidential sensitivity label applied is uploaded to Dropbox. the file must be deleted automatically. - The Fabrikam Confidential sensitivity label must be applied to existing Microsoft Word documents in the Data shared folder that have a document footer containing the following string: Company use only.
* Users must be able to manually select that email messages are sent encrypted. The encryption will use Office
365 Message Encryption (OME) v2. Any email containing an attachment that has the Fabrikam Confidential sensitivity label applied must be encrypted automatically by using OME.
* Existing policies configured in the third-party records management system must be replaced by using Records management in the Microsoft 365 compliance center. The compliance department plans to export the existing policies, and then produce a CSV file that contains matching labels and policies that are compatible with records management in Microsoft 365. The CSV file must be used to configure records management in Microsoft 365.
Executive Requirements
You must be able to restore all email received by Fabrikam executives for up to three years after an email is received, even if the email was deleted permanently.
NEW QUESTION # 192
You have a Microsoft 365 tenant.
A retention hold is applied to all the mailboxes in Microsoft Exchange Online.
A user named User1 leaves your company, and the account of User1 is deleted from Azure Active Directory (Azure AD).
You need to create a new user named User2 and provide User2 with access to the mailbox of User1.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbo HYPERLINK
"https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbox?view=o365- worldwide"x?view=o365-worldwide
NEW QUESTION # 193
You have a Microsoft 365 subscription that has a retention label named Retention1. The subscription contains the files shown in the following table.
You create an auto-labeling policy named Policy! that will automatically apply Retention1 as shown in the Auto-labeling policy exhibit. (Click the Auto-labeling policy tab.)
You configure Policy1 to apply Retention1 as shown in the Locations exhibit. (Click the Locations tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 194
You have a Microsoft 365 E5 subscription that has data loss prevention (DLP) implemented.
You need to create a custom sensitive info type. The solution must meet the following requirements:
* Match product serial numbers that contain a 10-character alphanumeric string.
* Ensure that the abbreviation of SN appears within six characters of each product serial number.
* Exclude a test serial number of 1111111111 from a match.
Which pattern settings should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 195
You plan to create a new data loss prevention (DLP) policy named DIP1.
DLP1 will be applied to the Exchange email location.
You need to exclude two users named User1 and User2 from DLP1.
What should you do first?
- A. Create an advanced DLP rule.
- B. Create a distribution list that contains User1 and User2.
- C. Create an organization sharing policy in Microsoft Exchange.
- D. Create a mail flow rule in Microsoft Exchange.
Answer: B
Explanation:
If you choose to include specific distribution groups in Exchange, the DLP policy is scoped only to the emails sent by members of that group. Similarly, excluding a distribution group excludes all the emails sent by the members of that distribution group from policy evaluation.
https://learn.microsoft.com/en-us/purview/dlp-policy-reference
NEW QUESTION # 196
You have the files shown in the following table.
You configure a retention policy as shown in the following exhibit.
The current date is January 1, 2021.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
Explanation:
NEW QUESTION # 197
You receive an email that contains a list of words that will be used for a sensitive information type.
You need to create a file that can be used as the source of a keyword dictionary.
In which format should you save the list?
- A. an XML file that contains a keyword tag for each word
- B. a JSON file that has an element for each word
- C. an ACCDB database file that contains a table named Dictionary
- D. a CSV file that contains words separated by commas
Answer: D
Explanation:
The keywords for your dictionary could come from various sources, most commonly from a file (such as a .csv or .txt list) imported in the service or by PowerShell cmdlet.
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. a CSV file that contains words separated by commas
2. a text file that has one word on each line
Other incorrect answer options you may see on the exam include the following:
- a TSV file that contains words separated by tabs
- an XLSX file that contains one word in each cell of the first row
- a DOCX file that has one word on each line
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-keyword- dictionary?view=o365-worldwide
NEW QUESTION # 198
Note: This question is part of a series of questions that present the same scenario. Each questionin the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring a file policy in Microsoft Cloud App Security.
You need to configure the policy to apply to all files. Alerts must be sent to every file owner who is affected by the policy. The policy must scan for credit card numbers, and alerts must be sent to the Microsoft Teams site of the affected department.
Solution: You use the Build-in DLP inspection method and send alerts to Microsoft Power Automate.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/cloud-app-security/ HYPERLINK "https://docs.microsoft.com/en-us/cloud- app-security/dcs-inspection"dcs-ins HYPERLINK "https://docs.microsoft.com/en-us/cloud-app-security/dcs- inspection"pection
https://do HYPERLINK "https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies"c HYPERLINK "https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies"s.microsoft.com
/en-us/cloud-app-security/data-protection-po HYPERLINK "https://docs.microsoft.com/en-us/cloud-app- security/data-protection-policies"licies
NEW QUESTION # 199
You need to meet the technical requirements for the Site1 documents.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365- worldwide#how-to-configure-auto-labeling-policies-for-sharepoint-onedrive-and-exchange
NEW QUESTION # 200
Each product group at your company must show a distinct product logo in encrypted emails instead of the standard Microsoft Office 365 logo.
What should you do to create the branding templates?
- A. Create an RMS template.
- B. Run the New-OMEConfiguration cmdlet.
- C. Create a Transport rule.
- D. Run the Set-IRMConfiguration cmdlet.
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/add-your-organization-brand-to-encryptedmessages?
NEW QUESTION # 201
You have a Microsoft 365 E5 subscription that contains a device named Device1.
You need to enable Endpoint data loss prevention (Endpoint DLP) for Device1.
What should you do first in the Microsoft Purview compliance portal?
- A. Onboard Device1 to Microsoft Purview.
- B. Add a Microsoft Purview Information Protection scanner cluster.
- C. Create a Microsoft Purview Information Barriers (IBs) segment.
- D. Enable Microsoft Priva Privacy Risk Management.
- E. Turn on device onboarding.
Answer: E
NEW QUESTION # 202
You have a Microsoft 365 subscription that contains the users shown in the following table.
You review the audit retention period of each user. Which users' audit logs are retained for nine months?
- A. User1, User2. and User3
- B. User1 and User3
- C. User3 only
- D. User2 and User3
Answer: C
NEW QUESTION # 203
You have a Microsoft 365 tenant.
A new regulatory requirement states that all documents containing a patent ID be labeled, retained for 10 years, and then deleted. The policy used to apply the retention settings must never be disabled or deleted by anyone.
You need to implement the regulatory requirement.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Choose three.)
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-preservation-lock?view=o365-worldwide
NEW QUESTION # 204
......
Microsoft SC-400 Dumps PDF Are going to be The Best Score: https://www.testinsides.top/SC-400-dumps-review.html
SC-400.pdf - Questions Answers PDF Sample Questions Reliable: https://drive.google.com/open?id=1-3r5sevyg9FxQsEipRjYxTReHO_N3a7B