SC-400 Communication Compliance 2 — Questions and Answers
Question 1: A compliance officer wants to monitor Teams messages for potential regulatory violations but only within specific channels used by the trading desk. Which scoping option should they configure in the Communication Compliance policy?
- Apply the policy to all users in the organization
- Specify individual users or groups as supervised users (Correct answer)
- Use a keyword filter to limit monitoring to trading terms only
- Enable the policy only during market hours using a schedule
Correct answer: Specify individual users or groups as supervised users
Communication Compliance policies allow you to scope supervision to specific users or groups, such as the trading desk team, rather than applying organization-wide.
Question 2: When configuring a Communication Compliance policy, an administrator selects 'Reviewers.' What is the role of reviewers in this context?
- They automatically remediate policy violations without human review
- They are the users whose communications are monitored
- They investigate flagged messages and take remediation actions (Correct answer)
- They configure the conditions and thresholds for the policy
Correct answer: They investigate flagged messages and take remediation actions
Reviewers are designated individuals who investigate alerts generated by Communication Compliance policies and take appropriate remediation actions.
Question 3: A company needs to ensure that all email sent by financial advisors containing the word 'guarantee' is captured for review. Which condition type in Communication Compliance best addresses this requirement?
- Sensitive information type condition
- Keyword condition (Correct answer)
- Threat condition
- Profanity condition
Correct answer: Keyword condition
The keyword condition in Communication Compliance policies captures messages containing specific words or phrases, such as 'guarantee,' for review.
Question 4: A reviewer in the Microsoft Purview compliance portal marks a Communication Compliance alert as 'Resolved.' What does this action signify?
- The message is permanently deleted from all mailboxes
- The alert has been investigated and no further action is required (Correct answer)
- The policy is paused pending further configuration
- The supervised user's account is suspended
Correct answer: The alert has been investigated and no further action is required
Marking an alert as 'Resolved' indicates that the reviewer has investigated the flagged communication and determined that no further action is needed.
Question 5: An organization wants to use Communication Compliance to detect messages that may constitute workplace harassment. Which built-in classifier is most appropriate for this scenario?
- Threat classifier
- Profanity classifier
- Harassment classifier (Correct answer)
- Regulatory collusion classifier
Correct answer: Harassment classifier
Microsoft Purview provides a built-in 'Harassment' trainable classifier designed to identify language that may constitute workplace harassment.
Question 6: A compliance team wants to review only 10% of all communications captured by a policy to manage review workload. Which feature supports this requirement?
- Content sampling with a percentage threshold (Correct answer)
- Keyword exclusion list
- Reviewer assignment rotation
- Alert aggregation by user
Correct answer: Content sampling with a percentage threshold
Communication Compliance policies support percentage-based content sampling, allowing organizations to review only a subset of captured communications.
Question 7: Which Microsoft Purview role group grants members full access to create and manage Communication Compliance policies and view all alerts?
- Compliance Administrator
- Communication Compliance Analysts
- Communication Compliance Investigators
- Communication Compliance Admins (Correct answer)
Correct answer: Communication Compliance Admins
The 'Communication Compliance Admins' role group provides full permissions to create policies, configure settings, and view all Communication Compliance alerts.
SC-400 Communication Compliance 2
A compliance officer wants to monitor Teams messages for potential regulatory violations but only within specific channels used by the trading desk.
Which scoping option should they configure in the Communication Compliance policy?