Microsoft SC-401 Practice Test 13

Question 120

An outgoing company newsletter is public and should be sent without confidentiality restrictions. Which response most directly addresses the stated need?

Apply an eligible sensitivity label configured for email encryption and permissions.
Configure eligible advanced message encryption options for the scenario.
Configure supported Microsoft Purview Message Encryption for the outgoing mail.
Use a public or general label without encryption or restrictive rights.

Explanation

Correct Answer

D:

A nonprotecting classification permits distribution of intended public information. It directly meets the case's requirement to leave public content distributable.

Incorrect Answers

A:

A label can protect supported email content according to defined recipient rights. That would protect sensitive email with label rights; the question instead requires a way to leave public content distributable.

B:

Advanced message encryption provides additional controls such as expiration or revocation subject to feature limitations. That would add enhanced email access controls; the question instead requires a way to leave public content distributable.

C:

Message Encryption provides controlled encrypted recipient experiences. That would deliver encrypted email to authenticated recipients; the question instead requires a way to leave public content distributable.

Question 121

An author cannot find a published label in Outlook because the label is scoped only to documents. Which configuration BEST meets the requirement?

Verify that the label's supported scope includes email.
Review label priority and override conditions for existing manual labels.
Check publishing targeting, supported client, and policy propagation.
Verify SharePoint and OneDrive sensitivity-label enablement and prerequisites.

Explanation

Correct Answer

A:

Label scopes determine which Office content types can use the label. It directly meets the case's requirement to expose an email-capable label.

Incorrect Answers

B:

Auto-labeling generally respects existing manual and higher-priority classification. That would explain label precedence behavior; the question instead requires a way to expose an email-capable label.

C:

User label availability depends on policy distribution and client support, not label creation alone. That would troubleshoot label visibility; the question instead requires a way to expose an email-capable label.

D:

Service-side labeling depends on tenant and workload enablement for supported files. That would satisfy SharePoint labeling prerequisites; the question instead requires a way to expose an email-capable label.

Question 122

A tenant has file labels but service-side auto-labeling in SharePoint fails prerequisite checks. Which Microsoft Purview approach should the administrator choose?

Review label priority and override conditions for existing manual labels.
Verify SharePoint and OneDrive sensitivity-label enablement and prerequisites.
Check publishing targeting, supported client, and policy propagation.
Verify that the label's supported scope includes email.

Explanation

Correct Answer

B:

Service-side labeling depends on tenant and workload enablement for supported files. It directly meets the case's requirement to satisfy SharePoint labeling prerequisites.

Incorrect Answers

A:

Auto-labeling generally respects existing manual and higher-priority classification. That would explain label precedence behavior; the question instead requires a way to satisfy SharePoint labeling prerequisites.

C:

User label availability depends on policy distribution and client support, not label creation alone. That would troubleshoot label visibility; the question instead requires a way to satisfy SharePoint labeling prerequisites.

D:

Label scopes determine which Office content types can use the label. That would expose an email-capable label; the question instead requires a way to satisfy SharePoint labeling prerequisites.

Question 123

A document retained an old label after an automatic policy matched a weaker rule. Which action most directly satisfies this requirement?

Verify that the label's supported scope includes email.
Verify SharePoint and OneDrive sensitivity-label enablement and prerequisites.
Review label priority and override conditions for existing manual labels.
Check publishing targeting, supported client, and policy propagation.

Explanation

Correct Answer

C:

Auto-labeling generally respects existing manual and higher-priority classification. It directly meets the case's requirement to explain label precedence behavior.

Incorrect Answers

A:

Label scopes determine which Office content types can use the label. That would expose an email-capable label; the question instead requires a way to explain label precedence behavior.

B:

Service-side labeling depends on tenant and workload enablement for supported files. That would satisfy SharePoint labeling prerequisites; the question instead requires a way to explain label precedence behavior.

D:

User label availability depends on policy distribution and client support, not label creation alone. That would troubleshoot label visibility; the question instead requires a way to explain label precedence behavior.

Question 124

A user sees a new label in Purview administration but not immediately in the Office label menu. What is the most appropriate next action?

Review label priority and override conditions for existing manual labels.
Verify SharePoint and OneDrive sensitivity-label enablement and prerequisites.
Verify that the label's supported scope includes email.
Check publishing targeting, supported client, and policy propagation.

Explanation

Correct Answer

D:

User label availability depends on policy distribution and client support, not label creation alone. It directly meets the case's requirement to troubleshoot label visibility.

Incorrect Answers

A:

Auto-labeling generally respects existing manual and higher-priority classification. That would explain label precedence behavior; the question instead requires a way to troubleshoot label visibility.

B:

Service-side labeling depends on tenant and workload enablement for supported files. That would satisfy SharePoint labeling prerequisites; the question instead requires a way to troubleshoot label visibility.

C:

Label scopes determine which Office content types can use the label. That would expose an email-capable label; the question instead requires a way to troubleshoot label visibility.

Question 125

An administrator labels a Teams container Confidential but must also restrict who can edit a specific spreadsheet. Which response most directly addresses the stated need?

Set document permissions in SharePoint in addition to the container label.
Apply an encryption-enabled item label with suitable user rights.
Configure a content-based DLP rule scoped to Exchange.
Enable item-level content marking without requiring encryption.

Explanation

Correct Answer

A:

Container settings do not replace the file authorization model. It directly meets the case's requirement to enforce spreadsheet edit permissions.

Incorrect Answers

B:

Persistent label encryption protects supported content beyond its original location. That would keep document protection with the file; the question instead requires a way to enforce spreadsheet edit permissions.

C:

DLP evaluates content conditions and sharing behavior separately from discretionary manual labeling. That would block risky sharing using content rules; the question instead requires a way to enforce spreadsheet edit permissions.

D:

Header and footer marks are independent optional label settings. That would communicate classification visibly; the question instead requires a way to enforce spreadsheet edit permissions.

Question 126

An IT team wants staff to label supported local files using Windows Explorer rather than opening each file in Office. Which configuration BEST meets the requirement?

Replace the retired add-in with native sensitivity labeling in supported Microsoft 365 Apps.
Deploy the Microsoft Purview Information Protection client to supported Windows endpoints.
Check the Purview client supported file types and protection capabilities.
Configure the Microsoft Purview Information Protection scanner for the file repositories.

Explanation

Correct Answer

B:

The client extends information-protection operations to eligible local file workflows. It directly meets the case's requirement to label files through Windows Explorer.

Incorrect Answers

A:

Supported Office clients have built-in labeling rather than requiring the legacy AIP add-in. That would modernize Office label integration; the question instead requires a way to label files through Windows Explorer.

C:

Feature support varies by file type and intended labeling or encryption operation. That would validate file-type labeling eligibility; the question instead requires a way to label files through Windows Explorer.

D:

The scanner inventories and can protect supported on-premises files at scale. That would classify on-premises files in bulk; the question instead requires a way to label files through Windows Explorer.

Question 127

A company relies on the retired Azure Information Protection unified labeling add-in for Office; users should use current supported labeling. Which Microsoft Purview approach should the administrator choose?

Deploy the Microsoft Purview Information Protection client to supported Windows endpoints.
Configure the Microsoft Purview Information Protection scanner for the file repositories.
Replace the retired add-in with native sensitivity labeling in supported Microsoft 365 Apps.
Check the Purview client supported file types and protection capabilities.

Explanation

Correct Answer

C:

Supported Office clients have built-in labeling rather than requiring the legacy AIP add-in. It directly meets the case's requirement to modernize Office label integration.

Incorrect Answers

A:

The client extends information-protection operations to eligible local file workflows. That would label files through Windows Explorer; the question instead requires a way to modernize Office label integration.

B:

The scanner inventories and can protect supported on-premises files at scale. That would classify on-premises files in bulk; the question instead requires a way to modernize Office label integration.

D:

Feature support varies by file type and intended labeling or encryption operation. That would validate file-type labeling eligibility; the question instead requires a way to modernize Office label integration.

Question 128

On-premises folders contain millions of files and require scheduled at-scale classification instead of manual user clicks. Which action most directly satisfies this requirement?

Replace the retired add-in with native sensitivity labeling in supported Microsoft 365 Apps.
Check the Purview client supported file types and protection capabilities.
Deploy the Microsoft Purview Information Protection client to supported Windows endpoints.
Configure the Microsoft Purview Information Protection scanner for the file repositories.

Explanation

Correct Answer

D:

The scanner inventories and can protect supported on-premises files at scale. It directly meets the case's requirement to classify on-premises files in bulk.

Incorrect Answers

A:

Supported Office clients have built-in labeling rather than requiring the legacy AIP add-in. That would modernize Office label integration; the question instead requires a way to classify on-premises files in bulk.

B:

Feature support varies by file type and intended labeling or encryption operation. That would validate file-type labeling eligibility; the question instead requires a way to classify on-premises files in bulk.

C:

The client extends information-protection operations to eligible local file workflows. That would label files through Windows Explorer; the question instead requires a way to classify on-premises files in bulk.

Question 129

A rollout requires proof that the client supports a proprietary file extension before choosing bulk labeling. What is the most appropriate next action?

Check the Purview client supported file types and protection capabilities.
Configure the Microsoft Purview Information Protection scanner for the file repositories.
Deploy the Microsoft Purview Information Protection client to supported Windows endpoints.
Replace the retired add-in with native sensitivity labeling in supported Microsoft 365 Apps.

Explanation

Correct Answer

A:

Feature support varies by file type and intended labeling or encryption operation. It directly meets the case's requirement to validate file-type labeling eligibility.

Incorrect Answers

B:

The scanner inventories and can protect supported on-premises files at scale. That would classify on-premises files in bulk; the question instead requires a way to validate file-type labeling eligibility.

C:

The client extends information-protection operations to eligible local file workflows. That would label files through Windows Explorer; the question instead requires a way to validate file-type labeling eligibility.

D:

Supported Office clients have built-in labeling rather than requiring the legacy AIP add-in. That would modernize Office label integration; the question instead requires a way to validate file-type labeling eligibility.

Question 130

A scanner service fails to inspect a protected Windows file share; the scanner identity has no repository access. Which response most directly addresses the stated need?

Grant documented repository permissions for classification and protection operations.
Grant the scanner service account suitable read and required write permissions.
Configure the supported Microsoft Entra authentication token for the scanner.
Run the scanner in discovery-only mode with read access.

Explanation

Correct Answer

B:

File share access rights are required for discovery and for writing labels or protection changes. It directly meets the case's requirement to authorize scanner repository access.

Incorrect Answers

A:

Applying protection to repository content requires broader permissions than read-only scanning. That would permit scanner labeling actions; the question instead requires a way to authorize scanner repository access.

C:

The scanner uses authorized service identity to communicate with cloud policy services. That would establish scanner cloud authentication; the question instead requires a way to authorize scanner repository access.

D:

Discovery mode can inspect supported repositories without applying labels or changing files. That would discover content without modification; the question instead requires a way to authorize scanner repository access.

Pass Your Microsoft SC-401 Exam Easy!

Question 120

Explanation

Correct Answer

Incorrect Answers

Question 121

Explanation

Correct Answer

Incorrect Answers

Question 122

Explanation

Correct Answer

Incorrect Answers

Question 123

Explanation

Correct Answer

Incorrect Answers

Question 124

Explanation

Correct Answer

Incorrect Answers

Question 125

Explanation

Correct Answer

Incorrect Answers

Question 126

Explanation

Correct Answer

Incorrect Answers

Question 127

Explanation

Correct Answer

Incorrect Answers

Question 128

Explanation

Correct Answer

Incorrect Answers

Question 129

Explanation

Correct Answer

Incorrect Answers

Question 130

Explanation

Correct Answer

Incorrect Answers

Administering Information Security in Microsoft 365 (SC-401) Practice Tests