SC-400 Free Sample Questions

A financial services firm is implementing Microsoft Purview Data Loss Prevention (DLP) to protect client data on corporate Windows 11 devices. The firm's policy must prevent users from copying sensitive content, identified by the 'Financial Records' sensitivity label, to any personal USB storage device. However, copying to company-issued, encrypted USB devices must be permitted. All other USB devices should be blocked entirely for any file transfer. Which Endpoint DLP setting is the most precise and efficient for achieving this granular control?

A legal firm is required to retain all client-related email communications for a period of 10 years after a case is officially closed. The closure of a case is a specific event that varies for each client. The firm needs to automate this retention process to ensure compliance and minimize manual overhead. Which combination of features in Microsoft Purview should be implemented to meet this requirement? (Select TWO).

A healthcare organization is configuring Microsoft Purview Insider Risk Management to detect potential HIPAA data violations. They have connected their HR system, which provides employee termination dates. A policy needs to be created that specifically monitors for high-volume downloads of files containing patient health information (PHI) from SharePoint Online by employees within 30 days of their termination date. What is the most critical prerequisite for this policy to function effectively?

An administrator at a manufacturing company has created a file plan in Microsoft Purview Records Management. They have defined several retention labels, including 'Engineering-Blueprints' which is configured to mark items as a regulatory record. The administrator now needs to ensure that this label is automatically applied to all documents within a specific SharePoint document library named 'Active Projects\Final Blueprints'. What is the most direct method to achieve this?

True or False: After a Preservation Lock is applied to a retention policy in the Microsoft Purview compliance portal, a Global Administrator can remove the lock if a valid business or legal justification is provided through a Microsoft support case.

A multinational corporation uses Microsoft Teams for collaboration between its Research and Development (R&D) and Sales departments. To prevent conflicts of interest and protect sensitive intellectual property, the company needs to prevent users in the R&D department from communicating via chat or calls with users in the Sales department. However, both departments must be able to communicate with the Legal department. Which Microsoft Purview solution should be implemented to enforce this communication boundary?

A consultant is tasked with creating a custom sensitive information type (SIT) to detect a new, internally developed project code format: `PROJ-` followed by two uppercase letters and four digits (e.g., `PROJ-AB1234`). The consultant needs to define a regular expression that has a high confidence level and minimizes false positives. Which of the following regular expressions is the most accurate and efficient for this requirement?

An eDiscovery manager for a global enterprise is preparing for litigation. The case involves custodians located in both Germany and the United States. Due to data residency regulations, data for German custodians must be processed and stored within the European Union. The manager needs to create a single eDiscovery (Premium) case to manage the litigation efficiently while respecting these regional data boundaries. What feature within Microsoft Purview eDiscovery (Premium) must be configured when creating the case to meet this requirement?

A university is using trainable classifiers to identify student admission forms. After initial training with 250 positive examples, the classifier is performing with low accuracy, frequently misclassifying research papers as admission forms. A compliance administrator has collected an additional 50 admission forms and 200 research papers. What is the correct next step to improve the classifier's performance?

**Case Study:** Contoso, Ltd. is a global consulting firm with a new Chief Compliance Officer (CCO) who has mandated a complete overhaul of the company's data governance strategy using Microsoft Purview. The primary goal is to automatically classify and protect sensitive client data without impeding employee productivity. **Existing Environment:** Contoso uses Microsoft 365 E5 licenses. All employees store documents in SharePoint Online and OneDrive for Business and use Exchange Online for email. A basic sensitivity label structure (Public, Internal, Confidential) exists but is applied manually and inconsistently. **Key Requirements:** 1. **Project Proposals:** Documents containing the keyword "Project Proposal" and a custom sensitive info type for "Client ID" must be automatically labeled as 'Confidential - Client'. This label must encrypt the document and apply a 'Contoso Confidential' watermark. 2. **Financial Reports:** Excel workbooks containing more than 10 credit card numbers must be automatically labeled as 'Highly Confidential - Finance'. This label must encrypt the document and restrict access to members of the 'Finance_Team' security group. 3. **User Experience:** When a label is automatically applied, users should be notified via a policy tip in Office apps. Users must not be allowed to downgrade the classification from 'Highly Confidential - Finance' to 'Confidential - Client' without providing a business justification. 4. **Deployment:** The CCO wants to test the accuracy of the auto-labeling logic for one month before any labels are actually applied to documents. Which single Microsoft Purview configuration should the administrator create to meet all these requirements?