View Full Microsoft SC-401 Exam Dumps and Practice Test Dumps.

 

Question 121

Which Microsoft Purview feature can require users to select a sensitivity label before they continue working with supported content?

1. Mandatory labeling
2. Audit Premium
3. Adaptive Protection
4. eDiscovery

Correct Answer: 1

Explanation

Mandatory labeling requires users to apply a sensitivity label to supported content before continuing with certain activities. This helps organizations improve classification consistency and reduce the amount of unlabeled business information. Administrators can publish appropriate labels and configure mandatory labeling according to organizational requirements. Users can then classify content using the labels available to them. Because mandatory labeling can affect normal workflows, administrators should test the configuration and ensure that users have suitable labels for their business activities. It is primarily an information classification control, not a retention mechanism.

Question 122

An organization wants to prevent users from lowering a document’s sensitivity classification without explaining the reason. Which setting should be configured?

1. Default labeling
2. Justification for lowering a sensitivity label
3. DLP simulation
4. Audit retention

Correct Answer: 2

Explanation

Organizations can require users to provide justification when they lower the sensitivity classification of supported content. This creates an additional accountability measure because the user must explain why the content should receive a less restrictive classification. The requirement can help reduce inappropriate or accidental downgrading of sensitive information while still allowing legitimate business decisions. Administrators can review related activity through supported auditing capabilities. This setting should be used as part of a broader information protection strategy and should be communicated clearly to users so that legitimate classification changes are not unnecessarily delayed.

Question 123

Which feature can automatically classify supported content with a predefined sensitivity label when the content meets configured conditions?

1. Audit search
2. Retention disposition
3. Auto-labeling
4. eDiscovery hold

Correct Answer: 3

Explanation

Microsoft Purview auto-labeling can automatically apply sensitivity labels to supported content when configured conditions are satisfied. Conditions can involve sensitive information and other supported classification criteria. This reduces reliance on users to manually classify every item and can improve consistency across large amounts of organizational data. Administrators should carefully test auto-labeling policies before broad deployment because a label may apply protection settings such as encryption or content marking. Proper testing helps prevent unintended classification and ensures that automatic labeling aligns with the organization’s information protection requirements.

Question 124

A company wants sensitive documents to display a classification notice without necessarily changing who can access them. Which sensitivity label feature should be used?

1. Content marking
2. Adaptive scope
3. Audit retention
4. Insider Risk policy

Correct Answer: 1

Explanation

Content marking allows sensitivity labels to add visible indicators such as headers, footers, or watermarks to supported content. These markings communicate the classification of information to users without necessarily changing access permissions. For example, a document can display a confidential notice so employees understand that it requires careful handling. Content marking is separate from encryption and access control. Administrators can combine markings with other label protection settings when stronger controls are required. This makes content marking useful for increasing user awareness of information classification.

Question 125

Which capability can identify text contained within supported scanned documents or images for sensitivity classification?

1. eDiscovery
2. OCR
3. Audit retention
4. Adaptive Protection

Correct Answer: 2

Explanation

Optical Character Recognition, or OCR, enables supported Microsoft Purview classification capabilities to recognize text within images and scanned documents. This is useful when sensitive information is stored visually rather than as selectable text. For example, an organization may have scanned documents containing identification numbers or financial information that still need to be classified. OCR extends classification capabilities to supported image-based content. Administrators should verify supported file types and workloads before relying on OCR for a specific business process and should combine it with appropriate protection policies.

Question 126

An organization needs a sensitivity label to apply encryption and restrict access to a defined group of employees. Which configuration is required?

1. Protection settings in the sensitivity label
2. Adaptive scope
3. DLP policy tip
4. Audit search

Correct Answer: 1

Explanation

Sensitivity label protection settings can apply encryption and access controls to supported content. Administrators can configure who is permitted to access protected information and what permissions those users receive, depending on the supported configuration. This helps protect the content even when it is shared or moved outside its original location. Protection settings differ from content marking because encryption controls access to the information while markings provide visible classification. Administrators should carefully define permissions to ensure that authorized employees can perform their required work without unnecessarily exposing sensitive information.

Question 127

Which Microsoft Purview capability can classify supported collaboration containers such as Microsoft Teams teams or Microsoft 365 Groups?

1. Container sensitivity labels
2. Audit search
3. Retention disposition
4. DLP alerts

Correct Answer: 1

Explanation

Container sensitivity labels can be applied to supported collaboration containers such as Microsoft Teams teams and Microsoft 365 Groups. They allow organizations to classify collaboration spaces and apply supported container-level settings according to the sensitivity of the information handled there. This differs from applying a sensitivity label directly to an individual document or email. Container labeling can help organizations establish consistent protection requirements for collaboration environments. Administrators should review the settings available for each supported service because container labels and content labels do not provide identical functionality.

Question 128

A security administrator needs to determine which sensitivity labels are available to a particular department. What should the administrator review?

1. Audit retention policies
2. Label publishing policy assignments
3. eDiscovery cases
4. Endpoint DLP activity

Correct Answer: 2

Explanation

Sensitivity label publishing policies determine which labels are made available to specific users or groups. When an administrator needs to verify whether a department can access particular labels, the publishing policy assignments should be reviewed. A label can exist within the organization without being available to every user. Targeted publishing helps organizations provide appropriate classification options to different departments while limiting unnecessary choices. This also supports controlled rollout and testing of new labels before they are made broadly available across the organization.

Question 129

What is the primary purpose of the Microsoft Purview Information Protection scanner?

1. To scan supported on-premises repositories for classification and protection
2. To create eDiscovery cases
3. To generate audit retention policies
4. To encrypt every endpoint automatically

Correct Answer: 1

Explanation

The Microsoft Purview Information Protection scanner helps organizations discover and classify supported files stored in on-premises repositories. Depending on configuration, the scanner can apply sensitivity labels and associated protection to supported content. This extends Microsoft Purview information protection capabilities to certain data that remains outside Microsoft 365 cloud storage. It can be useful for organizations that still operate file shares or other legacy repositories. Administrators should plan repository discovery, permissions, scanning configuration, and classification policies carefully before deploying the scanner in production.

Question 130

An organization wants to protect sensitive email messages sent to external recipients. Which Microsoft Purview capability is designed specifically for message protection?

1. Adaptive Protection
2. Microsoft Purview Message Encryption
3. Retention disposition
4. Activity Explorer

Correct Answer: 2

Explanation

Microsoft Purview Message Encryption protects supported email messages by encrypting their contents and applying access controls. This can help organizations securely communicate sensitive information with internal or external recipients while reducing the risk of unauthorized access. Message encryption focuses on protecting message confidentiality rather than determining how long a message should be retained. Administrators can combine message encryption with sensitivity labels and DLP policies to create layered protection. The exact recipient experience and available features depend on the configured protection settings and supported Microsoft services.

Question 131

Which Microsoft Purview capability can help administrators identify where sensitive information has been detected across supported data sources?

1. Data Explorer
2. Message Encryption
3. DLP override
4. Audit retention

Correct Answer: 1

Explanation

Data Explorer provides visibility into data classification results and can help administrators investigate where sensitive information has been detected. This can assist with understanding the organization’s data landscape before creating or refining information protection policies. Administrators can use the available information to examine classification results and identify areas where sensitive information requires additional controls. Data Explorer is primarily a visibility and investigation capability. It does not replace DLP or sensitivity labeling, but the information it provides can help administrators design those controls more effectively.

Question 132

An administrator wants to inspect individual items that have been classified and determine what sensitive information they contain. Which capability is most appropriate?

1. Adaptive scope
2. Content Explorer
3. Retention policy
4. Audit retention

Correct Answer: 2

Explanation

Content Explorer allows authorized administrators to examine classified content and investigate individual items associated with information protection classifications. It can provide useful details about content that contains sensitive information or has received sensitivity labels. This makes it valuable for validating classification results and investigating potential data protection issues. Because Content Explorer may expose sensitive business information during investigations, access should be carefully restricted to authorized personnel. Content Explorer focuses on examining classified content, whereas Activity Explorer focuses more on reviewing activities involving that content.

Question 133

Which Microsoft Purview feature can help detect a specific document format or structured form when it appears in supported content?

1. Document fingerprinting
2. OCR
3. Audit search
4. Adaptive scope

Correct Answer: 1

Explanation

Document fingerprinting helps identify supported documents based on a recognizable representation of a structured form or document. This can be useful when an organization has standardized forms that should receive additional protection when copied, shared, or stored in other locations. The capability is different from OCR, which recognizes text contained within images or scanned documents. Document fingerprinting focuses on recognizing a document structure or form. When incorporated into supported Purview policies, it can help organizations identify specific business documents that require additional information protection.

Question 134

An organization has a database containing known customer information and wants Purview to recognize those exact values in content. Which capability should be considered?

1. Exact Data Match
2. Content marking
3. Retention disposition
4. eDiscovery

Correct Answer: 1

Explanation

Exact Data Match, or EDM, is designed for scenarios where an organization wants to detect sensitive information by comparing content against known values. This can be useful for customer or employee datasets where exact values are already maintained in a structured source. EDM can provide more precise detection than broad pattern matching for supported scenarios. Administrators must prepare and configure the reference data according to Microsoft’s supported EDM requirements. Once configured, the resulting sensitive information type can be used with supported Microsoft Purview protection and compliance policies.

Question 135

Which classification method is particularly useful when the content category is difficult to detect using fixed patterns or keywords?

1. Audit retention
2. Trainable classifiers
3. Retention disposition
4. Message Encryption

Correct Answer: 2

Explanation

Trainable classifiers can identify content based on learned characteristics and representative examples, making them useful when fixed keywords or regular expressions are insufficient. Different documents within the same business category may use different wording, yet still share characteristics that distinguish them from unrelated content. Trainable classifiers can help address these scenarios by using classification models rather than depending solely on simple pattern matching. They can complement sensitive information types and other classification methods and can be incorporated into supported Microsoft Purview information protection workflows.

Question 136

Which DLP capability can warn users when their action may violate an organizational data protection policy?

1. DLP policy tips
2. Retention labels
3. Audit retention
4. eDiscovery

Correct Answer: 1

Explanation

DLP policy tips provide users with contextual notifications when their actions may conflict with configured data loss prevention rules. For example, a user may receive a warning when attempting to share sensitive information with an external recipient. Depending on the policy configuration, the user may be able to modify the action or provide justification for an override. Policy tips help make users aware of organizational data protection requirements at the point where risky activity occurs. They complement automated DLP enforcement by providing guidance and reducing accidental data loss.

Question 137

An organization wants to block users from transferring sensitive files to removable media on managed devices. Which Microsoft Purview capability should be configured?

1. Endpoint DLP
2. eDiscovery
3. Retention labels
4. Audit search

Correct Answer: 1

Explanation

Endpoint DLP can monitor and control supported activities involving sensitive information on managed devices, including certain transfers to removable media. Administrators can configure rules that identify sensitive content and apply actions such as audit, block, or block with override, depending on organizational requirements. This helps reduce the risk of users copying sensitive information from managed endpoints to unauthorized destinations. Endpoint DLP should be deployed with appropriate device management and policy configuration. Testing is recommended before enforcement so legitimate business activities are not unnecessarily disrupted.

Question 138

Which DLP action provides stronger protection than auditing while still allowing an authorized user to continue after providing justification?

1. Audit only
2. Block with override
3. Retention
4. Content marking

Correct Answer: 2

Explanation

Block with override prevents a potentially risky activity while allowing the user to continue if the configured override requirements are satisfied. Typically, the user must provide a business justification before the action can proceed. This is stronger than audit-only behavior because the activity is initially blocked rather than simply recorded. At the same time, it provides flexibility for legitimate business scenarios. Administrators can review override activity to determine whether policies are appropriately configured or whether frequent overrides indicate that a business process requires a different protection approach.

Question 139

Which Microsoft Purview capability can dynamically increase data protection controls when a user’s risk level changes?

1. Adaptive Protection
2. Document fingerprinting
3. Retention disposition
4. OCR

Correct Answer: 1

Explanation

Adaptive Protection uses risk information to dynamically adjust supported data protection controls according to changing user risk levels. This allows organizations to apply stronger protection when a user’s behavior indicates increased risk while avoiding identical restrictions for every user at all times. Adaptive Protection can work with supported DLP and related controls to create a more risk-aware security approach. It is particularly useful when an organization wants protection to respond to changing conditions rather than relying solely on static policies. Proper configuration and monitoring are important to avoid unnecessary disruption.

Question 140

A compliance team needs to search supported user and administrator activity to reconstruct events surrounding a suspected data leak. Which capability should they use?

1. Content Explorer
2. Audit
3. Sensitivity label publishing
4. Auto-labeling

Correct Answer: 2

Explanation

Microsoft Purview Audit provides searchable records of supported user and administrative activities across Microsoft services. During a suspected data leak investigation, the compliance team can use audit records to identify relevant activities and establish a timeline of events. Depending on available audit data and retention settings, investigators may be able to determine when actions occurred and which accounts or services were involved. Audit is therefore an important investigation capability, while Content Explorer is intended primarily for examining classified content rather than searching broad activity records.