Microsoft SC-400 Exam (page: 5)
Microsoft Information Protection Administrator
Updated on: 28-Jul-2025

Viewing Page 5 of 61

You have a Microsoft 365 tenant that uses Microsoft Office 365 Message Encryption (OME).
You need to ensure that any emails containing attachments and sent to user1@contoso.com are encrypted automatically by using OME.

What should you do?

  1. From the Exchange admin center, create a new sharing policy.
  2. From the Microsoft 365 security center, create a Safe Attachments policy.
  3. From the Exchange admin center, create a mail flow rule.
  4. From the Microsoft 365 compliance center, configure an auto-apply retention label policy.

Answer(s): C

Explanation:

You can create mail flow rules to help protect email messages you send and receive. You can set up rules to encrypt any outgoing email messages and remove encryption from encrypted messages coming from inside your organization or from replies to encrypted messages sent from your organization.


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?view=o365-worldwide



You plan to implement sensitivity labels for Microsoft Teams.
You need to ensure that you can view and apply sensitivity labels to new Microsoft Teams sites.
What should you do first?

  1. Run the Set-SPOSitecmdlet.
  2. Create a new sensitivity label scoped to Groups & sites.
  3. Run the Execute-AzureLabelSynccmdlet.
  4. Configure the EnableMIPLabels Azure Active Directory (Azure AD) setting.

Answer(s): D



HOTSPOT (Drag and Drop is not supported)
You have Microsoft 365 E5 tenant that has a domain name of M365x925027.onmicrosoft.com.
You have a published sensitivity label.
The Encryption settings for the sensitivity label are configured as shown in the exhibit.




For each of the following statements, select Yes if statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: Yes
When you create a sensitivity label, you can restrict access to content that the label will be applied to. Only users within your organization can open a confidential document or email.

Box 2: No
Assign permissions now has been selected.



Box 3: No
Only co-author and co-owner can print.


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/encryption-sensitivity-labels?view=o365-worldwide

https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights



HOTSPOT (Drag and Drop is not supported)
You plan to create a custom sensitive information type that will use Exact Data Match (EDM).
You need to identify what to upload to Microsoft 365, and which tool to use for the upload.
What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/create-custom-sensitive-information-types-with-exact-data-match-based-classification?view=o365-worldwide



DRAG DROP (Drag and Drop is not supported)
You have a Microsoft 365 tenant that uses data loss prevention (DLP).
You have a custom employee information form named Template1.docx.
You need to create a classification rule package based on the document fingerprint of Template1.docx.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/document-fingerprinting?view=o365-worldwide



Viewing Page 5 of 61



Share your comments for Microsoft SC-400 exam with other users:

Namrata 7/15/2023 2:22:00 AM

helpful questions
Anonymous