SC-100 Compliance, Governance & Data Security 5

Question 1

A cybersecurity architect must ensure that sensitive documents labeled 'Top Secret' can only be opened by users on compliant, Intune-managed devices. Which combination of technologies achieves this?

Accepted Answer

Sensitivity labels with RMS protection + Conditional Access device compliance policy

Answer

Sensitivity labels with RMS protection define who can access content, and Conditional Access policies with device compliance requirements restrict access to managed devices.

Question 2

An insider threat investigation reveals an employee copied 10,000 files to a USB drive. Which Microsoft solution could have detected and blocked this data exfiltration in real time?

Accepted Answer

Microsoft Purview Endpoint DLP

Answer

Microsoft Purview Endpoint DLP monitors and can block sensitive data from being copied to removable storage devices on Windows endpoints.

Question 3

A compliance officer needs to prove that a document was unaltered since it was originally saved. Which Microsoft Purview feature locks a labeled record so it cannot be modified or deleted?

Accepted Answer

Retention label declared as a regulatory record

Answer

Retention labels declared as regulatory records lock the content, preventing modification or deletion for the full retention period.

Question 4

An organization wants to use Microsoft Defender for Cloud to assess compliance with the Azure CIS Benchmark. What must be done before the assessment appears in the regulatory compliance dashboard?

Accepted Answer

Assign the CIS standard in the Defender for Cloud environment settings

Answer

The CIS Benchmark (or any regulatory standard) must be explicitly assigned in Defender for Cloud environment settings to appear in the compliance dashboard.

Question 5

A security architect is designing a solution to detect when employees send emails that contain confidential competitor analysis documents externally. Which Microsoft 365 capability provides this detection with policy-based alerting?

Accepted Answer

Microsoft Purview DLP with sensitive information types and email conditions

Answer

Microsoft Purview DLP policies can detect sensitive information types in emails and trigger alerts or blocks when sent to external recipients.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Compliance, Governance & Data Security 5