SC-400 Data Classification 4 — Questions and Answers
Question 1: A custom sensitive information type uses a regex pattern to detect account numbers. During testing, it generates too many false positives. Which element should be added to improve precision?
- Additional regex patterns
- Corroborating evidence (supporting elements) (Correct answer)
- Higher minimum confidence level only
- Larger character proximity
Correct answer: Corroborating evidence (supporting elements)
Adding supporting elements (corroborating evidence) such as keywords near the match increases precision by requiring additional context before flagging a match.
Question 2: Which Microsoft Purview tool allows administrators to monitor user actions on labeled content, such as when labels are applied, changed, or removed?
- Content Explorer
- Activity Explorer (Correct answer)
- Compliance Manager
- Information barriers
Correct answer: Activity Explorer
Activity Explorer provides an audit trail of labeling activities including label applied, changed, removed, and downgraded events across users and locations.
Question 3: An organization wants to prevent users from removing sensitivity labels without providing a business justification. Where is this setting configured?
- In the sensitivity label's protection settings
- In the label publishing policy (Correct answer)
- In the auto-labeling policy
- In the DLP policy
Correct answer: In the label publishing policy
The label publishing policy includes a setting to require users to provide justification when downgrading or removing a sensitivity label.
Question 4: What is the purpose of the 'instance count' setting in a sensitive information type rule?
- It sets the confidence threshold for matches
- It specifies the minimum and maximum number of occurrences required to trigger a match (Correct answer)
- It defines how many users can access the classified content
- It limits the number of policies that can use the sensitive information type
Correct answer: It specifies the minimum and maximum number of occurrences required to trigger a match
Instance count specifies the minimum (and optionally maximum) number of times a sensitive information type must appear in content to trigger the rule.
Question 5: A company needs to classify files based on the exact employee IDs stored in their HR database. Which sensitive information type approach provides the most accurate matching for this scenario?
- Built-in sensitive information types
- Custom regex-based sensitive information types
- Exact Data Match (EDM) sensitive information types (Correct answer)
- Trainable classifiers
Correct answer: Exact Data Match (EDM) sensitive information types
EDM sensitive information types match content against an uploaded table of exact values, making them ideal for matching against specific organizational data like employee IDs.
Question 6: In Microsoft Purview data classification, what does the 'proximity' setting define in a sensitive information type?
- The geographic region where classification applies
- The character distance within which supporting evidence must appear relative to the primary pattern (Correct answer)
- The time window for activity monitoring
- The minimum file size for classification
Correct answer: The character distance within which supporting evidence must appear relative to the primary pattern
Proximity defines the number of characters within which supporting elements (like keywords) must appear relative to the primary detection pattern to count as corroborating evidence.
Question 7: Which built-in trainable classifier would be most appropriate for identifying internal company strategy documents?
- Profanity
- Threat
- Corporate sabotage
- Business plan (Correct answer)
Correct answer: Business plan
The built-in 'Business plan' trainable classifier is designed to identify documents describing business strategies, plans, and corporate direction.
SC-400 Data Classification 4
A custom sensitive information type uses a regex pattern to detect account numbers.
During testing, it generates too many false positives.
Which element should be added to improve precision?