最新的Microsoft Administering Information Security in Microsoft 365 - SC-401免費考試真題

You are creating a data loss prevention (DLP) policy that will apply to all available locations except Fabric and Power BI workspaces.
You configure an advanced DLP rule in the policy.
Which type of condition can you use in the rule?

正確答案: D
說明:(僅 Fast2test 成員可見)
You are creating a custom trainable classifier to identify organizational product codes referenced in Microsoft 365 content.
You identify 300 files to use as seed content.
Where should you store the seed content?

正確答案: C
說明:(僅 Fast2test 成員可見)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You have a user named User1. Several users have full access to the mailbox of User1.
Some email messages sent to User1 appear to have been read and deleted before the user viewed them.
When you search the audit log in the Microsoft Purview portal to identify who signed in to the mailbox of User1, the results are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1.
Solution: You run the Set-AdminAuditLogConfig -AdminAuditLogEnabled $true - AdminAuditLogCmdlets *Mailbox* command.
Does that meet the goal?

正確答案: A
說明:(僅 Fast2test 成員可見)
Hotspot Question
You have a Microsoft 365 E5 tenant.
You have sensitivity labels as shown in the Sensitivity Labels exhibit. (Click the Sensitivity Labels tab.)

The Confidential/External sensitivity label is configured to encrypt files and emails when applied to content.
The sensitivity labels are published as shown in the Published exhibit. (Click the Published tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正確答案:
Hotspot Question
You have a Microsoft 365 subscription.
You configure encrypted email for the subscription.
You need to ensure that recipients of encrypted emails sign in to the message encryption portal to access the content of the emails. The solution must ensure that they sign in by using a Microsoft Entra account or a federated account.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正確答案:

Explanation:
Box 1: Set-OMEConfiguration
To force recipients to log into the Microsoft Purview Message Encryption portal using exclusively a Microsoft Entra ID (work or school) account or a federated account, you must disable alternative authentication methods-specifically Social ID Sign-In (Google, Yahoo, personal Microsoft accounts) and One-Time Passcodes (OTP).
Box 2: OTPEnabled $false
The configuration parameter that best satisfies your requirement is -OTPEnabled $false.
BestEnforces Account Sign-In: Setting -OTPEnabled $false explicitly prevents external recipients from using a fallback One-Time Passcode (OTP) to access the encrypted email portal.
Requires Corporate Identity: When OTP is disabled, Microsoft Purview Message Encryption strictly forces the recipient to authenticate using a valid Microsoft 365 work or school account (Microsoft Entra ID).
Reference:
https://learn.microsoft.com/en-us/powershell/exchange/exchange-online-powershell-v2
You have a Microsoft 365 tenant that uses Microsoft Purview Information Protection.
You create a sensitivity label named Sensitivity1 and configure Sensitivity1 to encrypt files and emails.
You publish Sensitivity1.
You discover that users are NOT prompted to apply Sensitivity1 to their files and email.
You need to ensure that the users must apply Sensitivity1 to their files and email before saving the files or sending the emails. The solution must meet the following requirements:
- Prevent users from removing the label from the files and emails.
- Minimize administrative effort.
What should you do?

正確答案: D
說明:(僅 Fast2test 成員可見)
Hotspot Question
You have a Microsoft 365 E5 subscription.
You have a file named Customer.csv that contains a list of 1,000 customer names.
You plan to use Customer.csv to classify documents stored in a Microsoft SharePoint Online library.
What should you create in the Microsoft Purview portal, and which type of element should you select? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正確答案:

Explanation:
To classify documents in SharePoint Online using Customer.csv, you need to create a trainable classifier. A trainable classifier is best suited for identifying patterns in unstructured data (e.g., customer names in documents). A sensitive info type is more suitable for structured data (e.g., credit card numbers, SSNs). An adaptive scope is used to apply policies dynamically based on attributes, not for classifying content.
Since Customer.csv contains a list of names, the best element to use is a keyword dictionary. A keyword dictionary allows you to upload a list of predefined terms (such as customer names) to classify documents based on their presence. Regular expressions are used for pattern-based detection (e.g., credit card numbers, serial numbers), which is not needed here. Functions are used for predefined sensitive data detection (e.g., checksum validation for credit card numbers), which does not apply in this case.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 tenant and 500 computers that run Windows 11. The computers are onboarded to Microsoft Purview.
You discover that a third-party application named Tailspin_scanner.exe accessed protected sensitive information on multiple computers.
Tailspin_scanner.exe is installed locally on the computers.
You need to block Tailspin_scanner.exe from accessing sensitive documents without preventing the application from accessing other documents.
Solution: From Microsoft Defender for Cloud Apps, you create an app discovery policy.
Does this meet the goal?

正確答案: A
說明:(僅 Fast2test 成員可見)
Drag and Drop Question
You have a Microsoft 365 E5 subscription that has data loss prevention (DLP) implemented.
You need to create a custom sensitive info type. The solution must meet the following requirements:
- Match product serial numbers that contain a 10-character alphanumeric string.
- Ensure that the abbreviation of SN appears within six characters of
each product serial number.
- Exclude a test serial number of 1111111111 from a match.
Which pattern settings should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正確答案:

Explanation:
Microsoft custom sensitive info types use pattern settings to refine detection accuracy for data loss prevention (DLP) policies.
The Primary element defines the main pattern that must be detected. Since we need to match a
10-character alphanumeric string, this should be defined in the primary element.
Character proximity determines how close a supporting keyword (e.g., "SN") must be to the detected data. Since "SN" must be within six characters of the product serial number, this setting ensures a valid match.
Additional checks allow for exceptions and exclusions in the detection logic. This ensures that
1111111111 (a test serial number) is excluded from triggering a match.
You have a Microsoft 365 E5 subscription.
You create a sensitivity label named Label1 and publish Label1 to all users and groups.
You have the following files in a SharePoint site:
- File1.doc
- File2.docx
- File3.xlsx
- File4.txt
You need to identify which files can have Label1 applied.
Which files should you identify?

正確答案: D
說明:(僅 Fast2test 成員可見)
You have a Microsoft 365 tenant that has a retention label policy.
You need to configure the policy to meet the following requirements:
- Prevent the disabling or deletion of the policy.
- Ensure that new labels can be added.
- Prevent the removal of labels.
What should you do?

正確答案: A
說明:(僅 Fast2test 成員可見)
You have a Microsoft 365 subscription that contains two Microsoft SharePoint Online sites named Site1 and Site2.
You plan to use policies to meet the following requirements:
- Add a watermark of Confidential to a document if the document
contains the words Project1 or Project2.
- Retain a document for seven years if the document contains credit
card information.
- Add a watermark of Internal Use Only to all the documents stored on
Site2.
- Add a watermark of Confidential to all the documents stored on Site1.
You need to recommend the minimum number of sensitive info types required.
How many sensitive info types should you recommend?

正確答案: A
說明:(僅 Fast2test 成員可見)
You have a Microsoft 365 E5 subscription.
You create a sensitivity label named Label1 and publish Label1 to all users and groups.
You have the following files on a computer:
- File1.doc
- File2.docx
- File3.xlsx
- File4.txt
You need to identify which files can have Label1 applied.
Which files should you identify?

正確答案: D
說明:(僅 Fast2test 成員可見)
Hotspot Question
You have a Microsoft 365 E5 subscription that contains two Microsoft SharePoint Online sites named Site1 and Site2. Site1 contains the files shown in the following table.

Site2 contains the files shown in the following table.

From the Microsoft Purview portal, you create the content searches shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正確答案:

Explanation:
Box 1: No
Author Mismatch: Search1 requires the author to be User1 (Author: User1).
Actual Author: The file File2.docx was authored by User2.
Box 2: No
File extension mismatch: Search2 requires a .docx extension (FileExtension:docx).
File FileA is a presentation: FileA.pptx is a PowerPoint file, so it is automatically excluded.
Box 3: Yes
Location Match: Search3 targets site Site2, which is where FileB.docx is stored.
Condition Match: Search3 looks for Author: User1. FileB.docx was authored by user User1.
Reference:
https://learn.microsoft.com/en-us/sharepoint/dev/general-development/building-search-queries-in-sharepoint

聯系我們

如果您有任何問題,請留下您的電子郵件地址,我們將在12小時內回复電子郵件給您。

我們的工作時間:( GMT 0:00-15:00 )
週一至週六

技術支持: 立即聯繫 

English 日本語 Deutsch 한국어