SC-400 Sample Questions & Answers

A multinational corporation uses Microsoft Teams for collaboration between its Research and Development (R&D) and Sales departments. To prevent conflicts of interest and protect sensitive intellectual property, the company needs to prevent users in the R&D department from communicating via chat or calls with users in the Sales department. However, both departments must be able to communicate with the Legal department. Which Microsoft Purview solution should be implemented to enforce this communication boundary?

A consultant is tasked with creating a custom sensitive information type (SIT) to detect a new, internally developed project code format: PROJ- followed by two uppercase letters and four digits (e.g., PROJ-AB1234). The consultant needs to define a regular expression that has a high confidence level and minimizes false positives. Which of the following regular expressions is the most accurate and efficient for this requirement?

An eDiscovery manager for a global enterprise is preparing for litigation. The case involves custodians located in both Germany and the United States. Due to data residency regulations, data for German custodians must be processed and stored within the European Union. The manager needs to create a single eDiscovery (Premium) case to manage the litigation efficiently while respecting these regional data boundaries. What feature within Microsoft Purview eDiscovery (Premium) must be configured when creating the case to meet this requirement?

A university is using trainable classifiers to identify student admission forms. After initial training with 250 positive examples, the classifier is performing with low accuracy, frequently misclassifying research papers as admission forms. A compliance administrator has collected an additional 50 admission forms and 200 research papers. What is the correct next step to improve the classifier's performance?

Case Study:

Contoso, Ltd. is a global consulting firm with a new Chief Compliance Officer (CCO) who has mandated a complete overhaul of the company's data governance strategy using Microsoft Purview. The primary goal is to automatically classify and protect sensitive client data without impeding employee productivity.

Existing Environment:
Contoso uses Microsoft 365 E5 licenses. All employees store documents in SharePoint Online and OneDrive for Business and use Exchange Online for email. A basic sensitivity label structure (Public, Internal, Confidential) exists but is applied manually and inconsistently.

Key Requirements:

1. Project Proposals: Documents containing the keyword "Project Proposal" and a custom sensitive info type for "Client ID" must be automatically labeled as 'Confidential - Client'. This label must encrypt the document and apply a 'Contoso Confidential' watermark.
2. Financial Reports: Excel workbooks containing more than 10 credit card numbers must be automatically labeled as 'Highly Confidential - Finance'. This label must encrypt the document and restrict access to members of the 'Finance_Team' security group.
3. User Experience: When a label is automatically applied, users should be notified via a policy tip in Office apps. Users must not be allowed to downgrade the classification from 'Highly Confidential - Finance' to 'Confidential - Client' without providing a business justification.
4. Deployment: The CCO wants to test the accuracy of the auto-labeling logic for one month before any labels are actually applied to documents.

Which single Microsoft Purview configuration should the administrator create to meet all these requirements?

A global logistics company, Fabrikam Shipping, is using Exact Data Match (EDM) to protect a database of over 1 million customer tracking numbers. The database is updated twice daily. The compliance team has identified a need to add a new 'Carrier Code' column to the EDM schema. The goal is to update the EDM schema and data with zero downtime for the DLP policies that rely on it. What is the correct sequence of actions?

A financial consulting firm needs to automatically apply a 'Confidential - Finance' sensitivity label to documents in a specific SharePoint Online site named 'Quarterly Audits'. This label must be applied at the service level to all new and modified documents containing credit card numbers. In contrast, for user endpoints, the firm wants to recommend this same label to users when they work on documents with credit card numbers in Word or Excel, but allow them to accept or dismiss the recommendation. Which combination of policies achieves this?

A law firm, Trey Research, needs to implement a highly secure email communication solution for a sensitive merger and acquisition case. They must ensure that emails sent to the external counsel can be revoked at any time and automatically expire after 15 days. Additionally, the firm wants to use a custom branding template for these emails that includes the case name. Which THREE of the following components must be configured to meet all requirements? (Select THREE)

A government agency processes standardized application forms that are submitted as PDF files. While the content inside the forms varies for each applicant, the layout, boilerplate text, and graphical elements are always identical. The agency wants to create a Data Loss Prevention (DLP) policy to prevent these specific forms from being emailed outside the agency network, regardless of the applicant data they contain. Which method is most suitable for accurately identifying these forms?

A hospital has deployed Endpoint DLP policies to prevent patient records from being copied to personal USB drives. The policy is configured to block 'Copy to removable USB device' for any content with the 'Patient Health Information' sensitivity label. A doctor reports that they are blocked from copying files to their hospital-issued, encrypted USB drive, which should be allowed. A security analyst confirms the doctor is in the correct user group and the USB drive is on the approved hardware list. What is the most likely cause of the issue?