SC-400 Information Protection & Governance 3

Question 1

A DLP policy is configured with a 'Block with override' action. What does this mean for end users?

Accepted Answer

Users can bypass the block by providing a business justification

Answer

Block with override allows users to justify and bypass the DLP restriction while creating an audit trail of the override.

Question 2

Which Microsoft Purview feature allows an organization to classify data in SharePoint Online, OneDrive, and Exchange using trainable classifiers?

Accepted Answer

Trainable classifiers in content explorer

Answer

Trainable classifiers use machine learning to identify content categories and can be applied via auto-labeling and DLP policies.

Question 3

An admin notices that a sensitivity label policy is not applying default labels to new documents created in Teams. What is the most likely cause?

Accepted Answer

The label policy was not published to the user or group

Answer

Label policies must be published to specific users or groups; if the Teams user is not in scope, no default label will be applied.

Question 4

What is a 'sublabel' in Microsoft Purview sensitivity labeling?

Accepted Answer

A child label nested under a parent label for more granular classification

Answer

Sublabels are nested under parent labels, allowing organizations to create hierarchical classification schemes (e.g., Confidential > Finance).

Question 5

An organization uses Microsoft Purview to protect sensitive PDFs shared externally. Which feature ensures that recipients outside the tenant can open protected PDFs without an Azure AD account?

Accepted Answer

One-time passcode (OTP) via Azure RMS

Answer

Azure RMS supports one-time passcode authentication, allowing external recipients without Azure AD accounts to access protected documents.

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

SC-400 Information Protection & Governance 3