SC-400 Sensitivity Labels 4 — Questions and Answers
Question 1: A sensitivity label policy includes a label tooltip message. Where does this tooltip appear to end users?
- In the Microsoft 365 admin center
- In Office apps when the user hovers over the label name (Correct answer)
- In the email notification sent after labeling
- In the DLP incident report
Correct answer: In Office apps when the user hovers over the label name
Label tooltips are displayed in Office applications when a user hovers over a label name in the sensitivity label picker, providing guidance on when to use the label.
Question 2: Which sensitivity label encryption configuration allows the label to expire access to content after a specific number of days?
- Set user-defined permissions
- Assign permissions now — Content expiration (Correct answer)
- Let users assign permissions
- Apply encryption with AIP scanner
Correct answer: Assign permissions now — Content expiration
When assigning permissions in a sensitivity label's encryption settings, administrators can set a content expiration date or number of days after which access is revoked.
Question 3: A company needs sensitivity labels to protect PDF files generated from labeled Word documents. Which setting ensures the PDF inherits the Word document's label?
- Enable PDF protection in the label encryption settings
- Configure label inheritance for PDF in the label policy
- Enable the 'Protect PDF with sensitivity labels' setting in SharePoint admin center (Correct answer)
- Apply auto-labeling to PDF file types in the auto-labeling policy
Correct answer: Enable the 'Protect PDF with sensitivity labels' setting in SharePoint admin center
The 'Sensitivity labels for Office files in SharePoint and OneDrive' setting must be enabled, and SharePoint can generate a protected PDF that inherits the Word document's sensitivity label.
Question 4: An administrator wants to prevent users in a specific department from removing sensitivity labels entirely. What configuration achieves this?
- Set the label policy to mandatory labeling for that user group (Correct answer)
- Apply a DLP policy to block label removal
- Configure information barriers for the department
- Use conditional access to restrict labeling actions
Correct answer: Set the label policy to mandatory labeling for that user group
Enabling mandatory labeling in a label policy prevents users from saving content without a sensitivity label, effectively blocking label removal since a label must always be present.
Question 5: Which sensitivity label container setting prevents guests from accessing a Microsoft Teams team?
- Privacy set to Private
- External sharing set to New and existing guests disabled (Correct answer)
- Unmanaged device access set to Block
- Information barriers mode enabled
Correct answer: External sharing set to New and existing guests disabled
Setting external sharing to prevent access by guests (disabled) in the sensitivity label's Groups & sites settings blocks all external guest access to the associated SharePoint site and Teams team.
Question 6: A sensitivity label is applied manually by a user. An auto-labeling policy later identifies the same document as matching a higher-priority label. What happens?
- The auto-label overwrites the manual label
- The manual label is retained; auto-labeling won't overwrite a manually applied label by default (Correct answer)
- An admin must resolve the conflict
- The document receives both labels
Correct answer: The manual label is retained; auto-labeling won't overwrite a manually applied label by default
By default, auto-labeling policies do not override manually applied sensitivity labels, respecting the user's explicit labeling decision unless configured otherwise.
Question 7: Which Microsoft Purview feature allows sensitivity labels to be extended to data stored in Azure SQL Database and Azure Data Lake?
- Microsoft Defender for Cloud Apps integration
- Microsoft Purview Data Map (formerly Azure Purview) (Correct answer)
- Endpoint DLP
- Azure Policy with sensitivity label tags
Correct answer: Microsoft Purview Data Map (formerly Azure Purview)
Microsoft Purview Data Map can scan and classify data in Azure SQL, Data Lake, and other data sources, applying sensitivity labels to schematized data assets.
SC-400 Sensitivity Labels 4
A sensitivity label policy includes a label tooltip message.
Where does this tooltip appear to end users?