SC-400 Sensitivity Labels 5 — Questions and Answers
Question 1: A sensitivity label is configured to apply a watermark in Word documents. On which type of content does the watermark NOT appear?
- Word (.docx) files
- Excel (.xlsx) spreadsheets (Correct answer)
- PowerPoint (.pptx) presentations
- PDF files exported from Word
Correct answer: Excel (.xlsx) spreadsheets
Watermarks configured in sensitivity labels are only supported in Word and PowerPoint; Excel does not support header, footer, or watermark content markings from sensitivity labels.
Question 2: An SC-400 administrator needs to ensure that sensitivity labels created in Microsoft Purview are also visible in Azure Information Protection (AIP) unified labeling clients. What is required?
- Export labels from Purview and import them into AIP
- Labels published in Microsoft Purview automatically sync to the AIP unified labeling store (Correct answer)
- Install the AIP scanner and configure a separate label taxonomy
- Enable the AIP add-in for Office via Group Policy
Correct answer: Labels published in Microsoft Purview automatically sync to the AIP unified labeling store
Microsoft Purview sensitivity labels are stored in the unified labeling store and automatically available to AIP unified labeling clients without additional export or import steps.
Question 3: Which setting in a sensitivity label policy controls whether users see a policy tip recommending a higher-priority label when they apply a lower one?
- Mandatory labeling
- Default labeling
- Label recommendations (Correct answer)
- Justification on downgrade
Correct answer: Label recommendations
The label recommendations setting displays a policy tip suggesting a higher sensitivity label when the content matches conditions for a more protective classification.
Question 4: A sensitivity label is scoped to 'Files & emails' only. An administrator tries to apply this label to a SharePoint site. What happens?
- The label is applied but site-level settings are ignored
- The label is not available for selection on SharePoint sites (Correct answer)
- An error is returned and the site keeps its previous label
- The label is applied with default site settings
Correct answer: The label is not available for selection on SharePoint sites
A label scoped only to 'Files & emails' will not appear in the options for applying labels to SharePoint sites or Microsoft 365 Groups, as the 'Groups & sites' scope is not enabled.
Question 5: When using the AIP unified labeling scanner to auto-label on-premises file shares, in which mode must the scanner run to apply labels to files?
- Discovery mode
- Enforce mode (Correct answer)
- Simulation mode
- Audit mode
Correct answer: Enforce mode
The AIP scanner must run in enforce mode (enforce = on) to actually apply sensitivity labels to files; discovery mode only identifies and reports on content without modifying it.
Question 6: A sensitivity label policy is configured with 'Require users to justify removing a label or lowering its classification'. Which audit log activity captures a user's justification text?
- SensitivityLabelApplied
- SensitivityLabelChanged (Correct answer)
- SensitivityLabelRemoved
- SensitivityLabelPolicyMatch
Correct answer: SensitivityLabelChanged
The SensitivityLabelChanged audit event is recorded when a user changes a label (including downgrading it) and captures the justification text the user provided.
Question 7: An organization publishes a sensitivity label with S/MIME encryption for Outlook. Which prerequisite must be in place for S/MIME to function?
- Azure Rights Management must be activated
- Users must have a valid S/MIME certificate installed on their device (Correct answer)
- The label must also have Azure RMS encryption enabled
- Office 365 Message Encryption must be configured
Correct answer: Users must have a valid S/MIME certificate installed on their device
S/MIME encryption through sensitivity labels requires that each user has a valid S/MIME certificate installed and trusted on their device; without the certificate, the encryption cannot be applied.
SC-400 Sensitivity Labels 5
A sensitivity label is configured to apply a watermark in Word documents.
On which type of content does the watermark NOT appear?