Microsoft SC-401 valid study dumps : Administering Information Security in Microsoft 365

You have a Microsoft 365 E5 subscription that uses Microsoft Purview.
You create a communication compliance policy named Policy1 and select Detect Microsoft Copilot interactions.
Which two trainable classifiers will be added to Policy1 automatically? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Protected Materials
• B. Unauthorized disclosure
• C. Prompt Shields
• D. Threat
• E. Corporate Sabotage

Explanation: Only visible for ValidDumps members. You can sign-up / login (it's free).

You have a Microsoft 365 E5 subscription.
You need to ensure that any message or document containing a credit card number is deleted automatically 12 months after it was created. The solution must minimize administrative effort.
Which two components should you create? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. a sensitivity label
• B. an auto-labeling policy for a sensitivity label
• C. a sensitive information type (SIT)
• D. an auto-labeling policy for a retention label
• E. a retention label

Explanation: Only visible for ValidDumps members. You can sign-up / login (it's free).

You plan to implement Microsoft Purview Advanced Message Encryption.
You need to ensure that encrypted email sent to external recipients expires after seven days.
What should you create first?

• A. a connector in Microsoft Exchange
• B. a remote domain in Microsoft Exchange
• C. an X.509 version 3 certificate
• D. a mail flow rule
• E. a custom branding template

Explanation: Only visible for ValidDumps members. You can sign-up / login (it's free).

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

You are evaluating Microsoft Purview Information Protection.
On which devices can you deploy the Information Protection client?

• A. Device1 and Device2 only
• B. Device1, Device3, and Device4 only
• C. Device1, Device2, Device3, and Device4
• D. Device1, Device2, and Device3 only
• E. Device1 only

Explanation: Only visible for ValidDumps members. You can sign-up / login (it's free).

SIMULATION
Username and password
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and select the username below.
To enter your password, place your cursor in the Enter password box and select the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: XXXXXXXXX
If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL "https://admin.microsoft.com", and press Enter.
The following information is for technical support purposes only:
Lab Instance: XXXXXXXXX
Task 1
You plan to implement Endpoint data loss prevention (Endpoint DLP). You plan to create a policy that will restrict OneDrive.exe from accessing files that have the Highly Confidential sensitivity label.
You need to configure the Endpoint DLP settings so that onedrive.exe actions can be restricted by a DLP policy.
You do NOT need to create a DLP policy at this time.

To restrict onedrive.exe actions in Microsoft Purview, you first configure it as a restricted app group in Endpoint DLP settings and then add that group to a DLP policy in the Microsoft Purview portal. In the Endpoint DLP settings, navigate to Data loss prevention > Settings > Data loss prevention > Endpoint settings > Restricted apps and app groups. Create a new group called
"Cloud Sync apps," select the Auto-quarantine option, and add onedrive.exe as the executable name for Windows.
Configure the restricted app group
Step 1: Sign in to the Microsoft Purview portal.
Step 2: Go to Data loss prevention > Settings (gear icon) > Data loss prevention > Endpoint settings.
Step 3: Expand Restricted apps and app groups.
Step 4: Under "Restricted app groups," select Add restricted app group.
Step 5: Enter a group name, such as Cloud Sync apps.
Step 6: Check the box for Auto-quarantine.
Step 7: In the "App name" field, add the executable name:
For Windows, enter onedrive.exe and click the + button.
Reference:
https://learn.microsoft.com/en-us/purview/endpoint-dlp-using