Microsoft Administering Information Security in Microsoft 365 SC-401 Exam Questions

You have a Microsoft 365 tenant that uses Microsoft Purview Information Protection.

You create a sensitivity label named Sensitivity1 and configure Sensitivity1 to encrypt files and emails.

You publish Sensitivity1.

You discover that users are NOT prompted to apply Sensitivity1 to their files and email.

You need to ensure that the users must apply Sensitivity1 to their files and email before saving the files or sending the emails. The solution must meet the following requirements:

* Prevent users from removing the label from the files and emails.

* Minimize administrative effort

What should you do?

You have a Microsoft 36S ES subscription that contains a Windows 11 device named Device 1 and three users named User 1. User2. and User3.

You plan to deploy Azure Information Protection (AIP) and the Microsoft Purview Information Protection client to Device 1.

You need to ensure that the users can perform the following actions on Device1 as part of the planned deployment

* User 1 will test the functionality of the client.

* User2 will install and configure the Microsoft Rights Management connector.

* User3 will be configured as the service account for the information protection scanner.

The solution must maximize the security of the sign-in process for the users What should you do?

You have a Microsoft 365 E5 tenant that contains a user named User1. User1 is assigned the Compliance Administrator role. User1 cannot view the regular expression in the IP Address sensitive info type. You need to ensure that User! can view the regular expression. What should you do?

You have a Microsoft 565 subscription that contains 100 users and a Microsoft 365 group named Group1. All users have Windows 11 devices and use Microsoft SharePoint Online and Exchange Online. A sensitivity label named Label! is published as the default label for Group1. You add two sublabels named Sublabel1 and Sublabel2 lo Label1. You need to ensure that the settings in Sublabel 1 are applied by default to Group 1. What should you do?

You have a Microsoft $65 subscription.

You plan to retain the following audit log record types and activities for the next three years.

* Copilotlnteraction: All activities selected (1/1)

o Interacted with Copilot

* Compliance DLP endpoint: All activities selected {2/2)

o Matched DIP rule

o Removed Dl P rule from document

* AzureActiveDirectory 2 of 25 activities selected (2/25)

o Reset user password o Changed user password

What is the minimum number of audit retention policies you should create to retain only the selected record types and activities?

You are configuring a data loss prevention (DLP) policy to report when credit card data is found on a Microsoft Entra joined Windows device.

You plan to use information from the policy to restrict the ability to copy the sensitive data to the clipboard.

What should you configure in the policy advanced DLP rule?

You have a sensitive information type based on a trainable classifier.

You are unsatisfied with the result of the trainable classifier.

You need to retrain the classifier.

What should you use in the Microsoft Purview portal?