SC-400 Communication Compliance 4 — Questions and Answers
Question 1: A reviewer in Communication Compliance wants to notify a supervised user's manager about a policy violation without disclosing the specific message content. Which remediation action supports this?
- Escalate for investigation to a senior reviewer
- Send a notification message to a designated recipient (Correct answer)
- Create a case in Microsoft Purview eDiscovery
- Apply a sensitivity label to the flagged message
Correct answer: Send a notification message to a designated recipient
Communication Compliance allows reviewers to send notification messages to designated recipients, such as a manager, as a remediation action for policy violations.
Question 2: An organization uses trainable classifiers in Communication Compliance. After deploying a classifier, reviews show many false positives. What is the recommended approach to improve accuracy?
- Delete the classifier and recreate it from scratch
- Provide feedback on incorrectly classified items to retrain the classifier (Correct answer)
- Switch to a keyword-based condition instead
- Increase the alert threshold percentage to reduce volume
Correct answer: Provide feedback on incorrectly classified items to retrain the classifier
Providing feedback on false positives in the Communication Compliance review interface helps retrain the trainable classifier to improve its accuracy over time.
Question 3: Which Microsoft 365 license is the minimum required for users to be supervised under a Communication Compliance policy?
- Microsoft 365 E1 or Office 365 E1
- Microsoft 365 E3 or Office 365 E3
- Microsoft 365 E5 Compliance or equivalent add-on (Correct answer)
- Microsoft 365 Business Premium
Correct answer: Microsoft 365 E5 Compliance or equivalent add-on
Communication Compliance requires Microsoft 365 E5 Compliance licensing (or an equivalent compliance add-on) for supervised users.
Question 4: A Communication Compliance alert is escalated to an eDiscovery case. What is the primary benefit of this escalation path?
- The alert is automatically resolved and removed from the queue
- Legal teams can place a hold on content and conduct deeper legal investigation (Correct answer)
- The supervised user is automatically notified of the legal review
- The policy conditions are automatically updated based on the case findings
Correct answer: Legal teams can place a hold on content and conduct deeper legal investigation
Escalating to eDiscovery allows legal teams to place holds on relevant content and conduct deeper investigations using the full eDiscovery toolset.
Question 5: A company configures a Communication Compliance policy with a condition based on a sensitive information type for credit card numbers. In which scenario would this policy NOT generate an alert?
- A supervisor emails a credit card number to a vendor
- An employee sends a Teams message containing a partial credit card number below the confidence threshold (Correct answer)
- An employee emails a full 16-digit credit card number to an external recipient
- A manager shares a document with credit card data via Teams chat
Correct answer: An employee sends a Teams message containing a partial credit card number below the confidence threshold
Sensitive information type conditions have confidence thresholds; if a partial or ambiguous match falls below the configured confidence level, it will not trigger an alert.
Question 6: An administrator needs to ensure that Communication Compliance reviewers cannot see messages sent by C-suite executives. How can this be achieved?
- Exclude executive users from the supervised user scope of the policy (Correct answer)
- Apply a litigation hold to executive mailboxes to restrict access
- Configure role-based access control to hide executive mailboxes
- Use message encryption to prevent reviewers from reading executive emails
Correct answer: Exclude executive users from the supervised user scope of the policy
Excluding executive users from the supervised user scope of the Communication Compliance policy ensures their communications are not captured or visible to reviewers.
Question 7: An organization wants to use Communication Compliance to meet FINRA Rule 3110 requirements. Which type of communication is FINRA most concerned with supervising under this rule?
- Internal HR communications about employee performance
- Customer-facing communications from registered representatives (Correct answer)
- IT helpdesk tickets and support communications
- Marketing email campaigns sent to prospects
Correct answer: Customer-facing communications from registered representatives
FINRA Rule 3110 requires broker-dealers to supervise customer-facing communications from registered representatives to detect and prevent regulatory violations.
SC-400 Communication Compliance 4
A reviewer in Communication Compliance wants to notify a supervised user's manager about a policy violation without disclosing the specific message content.
Which remediation action supports this?