SC-400 Insider Risk Management 2

Question 1

Which role is required to configure Insider Risk Management policies in Microsoft Purview?

Accepted Answer

Compliance Administrator

Answer

The Compliance Administrator role (or Insider Risk Management role group) is required to create and manage Insider Risk Management policies.

Question 2

An organization wants to detect when employees are accessing sensitive data shortly before their scheduled departure date. Which Insider Risk Management policy template should be used?

Accepted Answer

Departing employee data theft

Answer

The 'Departing employee data theft' template is specifically designed to detect risky activities by employees who have a termination date set in HR systems.

Question 3

What is the purpose of the 'sequence' feature in Insider Risk Management?

Accepted Answer

It detects a series of related risk activities that together indicate a higher risk

Answer

Sequences identify chains of related activities (e.g., browsing job sites, then exfiltrating files) that together represent a more significant insider threat.

Question 4

Which of the following is a prerequisite for using HR-based triggers in Insider Risk Management policies?

Accepted Answer

Configure an HR data connector

Answer

The Microsoft 365 HR data connector must be configured to import termination dates and other HR signals used as policy triggers.

Question 5

A security analyst wants to review all content associated with a specific insider risk case. Which Insider Risk Management feature allows them to view actual file content?

Accepted Answer

Content explorer in the case

Answer

The content explorer within a case allows investigators with appropriate permissions to view the actual files and emails associated with a user's risky activity.

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

SC-400 Insider Risk Management 2