SC-400 Sensitivity Labels 3 — Questions and Answers
Question 1: A label policy is configured to require users to apply a label before saving an Office document. A user closes a document without saving. What occurs?
- The document is auto-saved with the default label
- The user is prompted to apply a label before the document can be closed (Correct answer)
- The document is discarded without a label
- An incident report is generated in the compliance portal
Correct answer: The user is prompted to apply a label before the document can be closed
When mandatory labeling is enforced, users cannot save or close a document without first selecting a sensitivity label.
Question 2: Which sensitivity label setting controls whether external users from a federated Azure AD tenant can access an encrypted SharePoint document?
- External sharing controls on the site
- Let users assign permissions setting
- Encryption settings: Add any authenticated users (Correct answer)
- Conditional access policy
Correct answer: Encryption settings: Add any authenticated users
Adding 'Any authenticated users' in the label's encryption settings allows any user who authenticates with a Microsoft identity, including external federated users, to access the content.
Question 3: An auto-labeling policy is in simulation mode. What is the primary purpose of this mode?
- To enforce labeling without notifying users
- To preview which content would be labeled before actual enforcement (Correct answer)
- To train the machine learning classifier
- To test DLP policies alongside labeling
Correct answer: To preview which content would be labeled before actual enforcement
Simulation mode allows administrators to review which items would receive a label before enabling the policy, preventing unintended changes to production content.
Question 4: A sensitivity label configured for SharePoint sites sets the privacy setting to 'Private'. What does this control?
- Only owners can view the site
- Only members can view the site content; non-members see it as private (Correct answer)
- The site is hidden from search
- Guest access is permanently blocked
Correct answer: Only members can view the site content; non-members see it as private
Setting a site's privacy to Private via a sensitivity label means only members of the group can access the site; non-members cannot view the group or its content.
Question 5: Which tool should an SC-400 administrator use to see which files in SharePoint Online currently have a specific sensitivity label applied?
- Activity explorer
- Content explorer (Correct answer)
- Compliance Manager
- Information barriers report
Correct answer: Content explorer
Content explorer shows a snapshot of items that have sensitivity labels or sensitive information types, allowing administrators to see current label distribution across locations.
Question 6: A label with encryption is applied to a Word document. The document is attached to an Outlook email. What protection applies to the attachment?
- The attachment inherits the email's label encryption
- The attachment retains its own label encryption independent of the email label (Correct answer)
- The attachment encryption is removed when attached to email
- The higher priority label between email and file is applied to both
Correct answer: The attachment retains its own label encryption independent of the email label
Sensitivity labels applied to files travel with the file; an encrypted Word document retains its own label and encryption even when attached to an email with a different label.
Question 7: An organization uses sensitivity labels with trainable classifiers for auto-labeling. Which type of classifier is pre-built by Microsoft for common content categories?
- Custom classifier
- Exact Data Match classifier
- Built-in trainable classifier (Correct answer)
- Keyword dictionary classifier
Correct answer: Built-in trainable classifier
Microsoft provides built-in (pre-trained) trainable classifiers for common categories like resumes, source code, financial documents, and offensive language without requiring custom training.
SC-400 Sensitivity Labels 3
A label policy is configured to require users to apply a label before saving an Office document.
A user closes a document without saving.
What occurs?