SC-400 Information Protection & Governance 4 — Questions and Answers
Question 1: An organization wants to track when users downgrade a sensitivity label (e.g., from 'Confidential' to 'General'). Which tool provides this visibility?
- Content Explorer
- Activity Explorer (Correct answer)
- Compliance Manager
- Microsoft Sentinel
Correct answer: Activity Explorer
Activity Explorer records label-related activities including downgrades, overrides, and removals with user and timestamp details.
Question 2: A sensitivity label is configured to apply a watermark 'DRAFT' to Word documents. When does the watermark appear?
- Only when the document is printed
- Only in Print Preview mode
- When the document is opened in a supported Office application (Correct answer)
- Only after the document is saved to SharePoint
Correct answer: When the document is opened in a supported Office application
Content markings like watermarks are applied dynamically when the document is opened in a supported Office application that respects the label.
Question 3: Which Exact Data Match (EDM) component defines the structure and schema of the sensitive data being matched?
- EDM upload agent
- Schema XML file (Correct answer)
- Classifier manifest
- Sensitive information type rule package
Correct answer: Schema XML file
The EDM schema XML file defines the fields and their properties in the sensitive data table used for exact matching.
Question 4: A company labels Teams meeting recordings with 'Internal Only'. A user attempts to share the recording externally via a link. What happens if a DLP policy is configured to block external sharing of 'Internal Only' content?
- The recording is automatically re-labeled before sharing
- The share action is blocked and the user receives a policy tip (Correct answer)
- The recording is quarantined in SharePoint
- The external recipient sees a redacted version
Correct answer: The share action is blocked and the user receives a policy tip
DLP policies detect the sensitivity label on the recording and block the external share, displaying a policy tip to inform the user.
Question 5: What is the purpose of the 'mandatory labeling' setting in a sensitivity label policy?
- Forces encryption on all labeled documents
- Requires users to apply a label before saving or sending a document (Correct answer)
- Automatically labels all unlabeled content in SharePoint
- Prevents users from creating new sensitivity labels
Correct answer: Requires users to apply a label before saving or sending a document
Mandatory labeling requires users to explicitly choose a sensitivity label before they can save a document or send an email.
Question 6: An organization needs to protect scanned image files (JPEG, PNG) that contain sensitive text using sensitivity labels. Which capability is required?
- Azure Form Recognizer integration
- Optical Character Recognition (OCR) in Microsoft Purview (Correct answer)
- Microsoft Defender for Cloud Apps file scanning
- Azure Cognitive Search
Correct answer: Optical Character Recognition (OCR) in Microsoft Purview
Microsoft Purview supports OCR scanning to detect sensitive information within image files so labels and DLP policies can be applied.
Question 7: A sensitivity label policy is configured with a default label of 'General'. A user opens an existing unlabeled document. What occurs?
- The document is immediately labeled 'General' upon opening
- The default label applies only when creating new documents, not existing ones (Correct answer)
- The user is forced to choose a label before the document opens
- The document is auto-labeled by the auto-labeling policy instead
Correct answer: The default label applies only when creating new documents, not existing ones
Default label settings in label policies apply to new documents; existing unlabeled documents are not retroactively labeled by this setting.
SC-400 Information Protection & Governance 4
An organization wants to track when users downgrade a sensitivity label (e.g., from 'Confidential' to 'General').
Which tool provides this visibility?