Pass Your Microsoft SC-401 Exam Easy!

Microsoft SC-401 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

SC-401 Premium Bundle

$74.99

Microsoft SC-401 Premium Bundle

SC-401 Premium File: 291 Questions & Answers

Last Update: Oct 23, 2026

SC-401 Training Course: 101 Video Lectures

SC-401 Bundle gives you unlimited access to "SC-401" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
Microsoft SC-401 Premium Bundle
Microsoft SC-401 Premium Bundle

SC-401 Premium File: 291 Questions & Answers

Last Update: Oct 23, 2026

SC-401 Training Course: 101 Video Lectures

$74.99

SC-401 Bundle gives you unlimited access to "SC-401" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Microsoft SC-401 Practice Test 28

Question 270

A policy targets cloud email only, yet IT expects it to block local USB copies. Which response most directly addresses the stated need?

  1. Validate user-and-device targeting and the documented policy scope behavior.
  2. Add the Devices location with appropriate Endpoint DLP activity actions.
  3. Use a narrow authorized policy device exclusion.
  4. Configure supported user and device scoping and validate exclusions.

Explanation

Correct Answer

B:

Device operations are not covered merely by selecting an Exchange policy location. It directly meets the case's requirement to extend DLP to local USB transfers.

Incorrect Answers

A:

Combined targeting has documented semantics that require testing to avoid unexpected enforcement. That would resolve compound endpoint policy targeting; the question instead requires a way to extend DLP to local USB transfers.

C:

Exclusion controls can prevent specific managed devices from receiving selected restrictions. That would exempt a maintenance device deliberately; the question instead requires a way to extend DLP to local USB transfers.

D:

Endpoint policy targeting can combine identities and devices subject to documented behavior. That would limit Endpoint DLP to intended users; the question instead requires a way to extend DLP to local USB transfers.

Question 271

A deployed device policy must apply to a defined user group rather than everybody using supported hardware. Which configuration BEST meets the requirement?

  1. Validate user-and-device targeting and the documented policy scope behavior.
  2. Add the Devices location with appropriate Endpoint DLP activity actions.
  3. Configure supported user and device scoping and validate exclusions.
  4. Use a narrow authorized policy device exclusion.

Explanation

Correct Answer

C:

Endpoint policy targeting can combine identities and devices subject to documented behavior. It directly meets the case's requirement to limit Endpoint DLP to intended users.

Incorrect Answers

A:

Combined targeting has documented semantics that require testing to avoid unexpected enforcement. That would resolve compound endpoint policy targeting; the question instead requires a way to limit Endpoint DLP to intended users.

B:

Device operations are not covered merely by selecting an Exchange policy location. That would extend DLP to local USB transfers; the question instead requires a way to limit Endpoint DLP to intended users.

D:

Exclusion controls can prevent specific managed devices from receiving selected restrictions. That would exempt a maintenance device deliberately; the question instead requires a way to limit Endpoint DLP to intended users.

Question 272

A workstation appears in device inventory but must temporarily be excluded during a controlled maintenance operation. Which Microsoft Purview approach should the administrator choose?

  1. Validate user-and-device targeting and the documented policy scope behavior.
  2. Configure supported user and device scoping and validate exclusions.
  3. Add the Devices location with appropriate Endpoint DLP activity actions.
  4. Use a narrow authorized policy device exclusion.

Explanation

Correct Answer

D:

Exclusion controls can prevent specific managed devices from receiving selected restrictions. It directly meets the case's requirement to exempt a maintenance device deliberately.

Incorrect Answers

A:

Combined targeting has documented semantics that require testing to avoid unexpected enforcement. That would resolve compound endpoint policy targeting; the question instead requires a way to exempt a maintenance device deliberately.

B:

Endpoint policy targeting can combine identities and devices subject to documented behavior. That would limit Endpoint DLP to intended users; the question instead requires a way to exempt a maintenance device deliberately.

C:

Device operations are not covered merely by selecting an Exchange policy location. That would extend DLP to local USB transfers; the question instead requires a way to exempt a maintenance device deliberately.

Question 273

An administrator is unsure whether a rule applies because both user and device conditions are configured. Which action most directly satisfies this requirement?

  1. Validate user-and-device targeting and the documented policy scope behavior.
  2. Add the Devices location with appropriate Endpoint DLP activity actions.
  3. Use a narrow authorized policy device exclusion.
  4. Configure supported user and device scoping and validate exclusions.

Explanation

Correct Answer

A:

Combined targeting has documented semantics that require testing to avoid unexpected enforcement. It directly meets the case's requirement to resolve compound endpoint policy targeting.

Incorrect Answers

B:

Device operations are not covered merely by selecting an Exchange policy location. That would extend DLP to local USB transfers; the question instead requires a way to resolve compound endpoint policy targeting.

C:

Exclusion controls can prevent specific managed devices from receiving selected restrictions. That would exempt a maintenance device deliberately; the question instead requires a way to resolve compound endpoint policy targeting.

D:

Endpoint policy targeting can combine identities and devices subject to documented behavior. That would limit Endpoint DLP to intended users; the question instead requires a way to resolve compound endpoint policy targeting.

Question 274

An employee prints a labeled board memo on a household printer from a managed laptop. What is the most appropriate next action?

  1. Use Endpoint DLP browser-upload policy with supported service-domain restrictions.
  2. Configure Endpoint DLP printing restrictions for the classification.
  3. Configure the supported device removable-media rule on the onboarded endpoint.
  4. Configure Endpoint DLP restrictions for copy to network share.

Explanation

Correct Answer

B:

Endpoint DLP can govern supported print actions from protected local files. It directly meets the case's requirement to restrict personal-printer use.

Incorrect Answers

A:

Browser upload controls can govern file egress through supported web workflows. That would block personal-webmail file upload; the question instead requires a way to restrict personal-printer use.

C:

Device protection addresses supported local transfers beyond cloud-sharing policy conditions. That would stop offline USB extraction; the question instead requires a way to restrict personal-printer use.

D:

Network-share transfer is a device activity distinct from browser uploading. That would stop network-share exfiltration; the question instead requires a way to restrict personal-printer use.

Question 275

A worker drags a protected design file to a mounted network drive. Which response most directly addresses the stated need?

  1. Use Endpoint DLP browser-upload policy with supported service-domain restrictions.
  2. Configure Endpoint DLP printing restrictions for the classification.
  3. Configure Endpoint DLP restrictions for copy to network share.
  4. Configure the supported device removable-media rule on the onboarded endpoint.

Explanation

Correct Answer

C:

Network-share transfer is a device activity distinct from browser uploading. It directly meets the case's requirement to stop network-share exfiltration.

Incorrect Answers

A:

Browser upload controls can govern file egress through supported web workflows. That would block personal-webmail file upload; the question instead requires a way to stop network-share exfiltration.

B:

Endpoint DLP can govern supported print actions from protected local files. That would restrict personal-printer use; the question instead requires a way to stop network-share exfiltration.

D:

Device protection addresses supported local transfers beyond cloud-sharing policy conditions. That would stop offline USB extraction; the question instead requires a way to stop network-share exfiltration.

Question 276

A business requires every file in a designated SharePoint site to be retained for seven years without individual user classification. Which configuration BEST meets the requirement?

  1. Publish applicable retention labels with a retention label policy.
  2. Create and apply a suitable retention label to the contract.
  3. Scope an Exchange Online retention policy to the intended mailboxes.
  4. Create an appropriate SharePoint retention policy for the site.

Explanation

Correct Answer

D:

A location-scoped retention policy applies a retention rule broadly to eligible content. It directly meets the case's requirement to retain all site content by location.

Incorrect Answers

A:

Publishing exposes available retention labels for authorized users and locations. That would make item retention labels selectable; the question instead requires a way to retain all site content by location.

B:

Retention labels assign item-level lifecycle behavior to eligible files. That would give an individual contract a retention class; the question instead requires a way to retain all site content by location.

C:

Workload retention policies govern eligible mailbox content by policy scope. That would apply default mailbox retention; the question instead requires a way to retain all site content by location.

Question 277

A legal contract must have a distinct five-year period and optional disposition handling based on its classification. Which Microsoft Purview approach should the administrator choose?

  1. Create and apply a suitable retention label to the contract.
  2. Create an appropriate SharePoint retention policy for the site.
  3. Scope an Exchange Online retention policy to the intended mailboxes.
  4. Publish applicable retention labels with a retention label policy.

Explanation

Correct Answer

A:

Retention labels assign item-level lifecycle behavior to eligible files. It directly meets the case's requirement to give an individual contract a retention class.

Incorrect Answers

B:

A location-scoped retention policy applies a retention rule broadly to eligible content. That would retain all site content by location; the question instead requires a way to give an individual contract a retention class.

C:

Workload retention policies govern eligible mailbox content by policy scope. That would apply default mailbox retention; the question instead requires a way to give an individual contract a retention class.

D:

Publishing exposes available retention labels for authorized users and locations. That would make item retention labels selectable; the question instead requires a way to give an individual contract a retention class.

Question 278

An HR mailbox must be subject to organization-wide mail retention regardless of a user's manual labels. Which action most directly satisfies this requirement?

  1. Create an appropriate SharePoint retention policy for the site.
  2. Scope an Exchange Online retention policy to the intended mailboxes.
  3. Create and apply a suitable retention label to the contract.
  4. Publish applicable retention labels with a retention label policy.

Explanation

Correct Answer

B:

Workload retention policies govern eligible mailbox content by policy scope. It directly meets the case's requirement to apply default mailbox retention.

Incorrect Answers

A:

A location-scoped retention policy applies a retention rule broadly to eligible content. That would retain all site content by location; the question instead requires a way to apply default mailbox retention.

C:

Retention labels assign item-level lifecycle behavior to eligible files. That would give an individual contract a retention class; the question instead requires a way to apply default mailbox retention.

D:

Publishing exposes available retention labels for authorized users and locations. That would make item retention labels selectable; the question instead requires a way to apply default mailbox retention.

Question 279

A business wants employees to choose from approved item-specific retention classes in SharePoint. What is the most appropriate next action?

  1. Create and apply a suitable retention label to the contract.
  2. Create an appropriate SharePoint retention policy for the site.
  3. Publish applicable retention labels with a retention label policy.
  4. Scope an Exchange Online retention policy to the intended mailboxes.

Explanation

Correct Answer

C:

Publishing exposes available retention labels for authorized users and locations. It directly meets the case's requirement to make item retention labels selectable.

Incorrect Answers

A:

Retention labels assign item-level lifecycle behavior to eligible files. That would give an individual contract a retention class; the question instead requires a way to make item retention labels selectable.

B:

A location-scoped retention policy applies a retention rule broadly to eligible content. That would retain all site content by location; the question instead requires a way to make item retention labels selectable.

D:

Workload retention policies govern eligible mailbox content by policy scope. That would apply default mailbox retention; the question instead requires a way to make item retention labels selectable.

Question 280

Invoices need the correct retention label automatically when a supported sensitive information type matches stored items. Which response most directly addresses the stated need?

  1. Publish the labels for manual selection in supported locations.
  2. Apply a location-based retention policy to the archive site.
  3. Configure an appropriate record-capable retention label and apply it to those items.
  4. Create a supported auto-apply retention label policy with the matching condition.

Explanation

Correct Answer

D:

Auto-apply retention label policies classify eligible content by conditions without relying on user selection. It directly meets the case's requirement to auto-label matching invoice records.

Incorrect Answers

A:

Publishing makes labels available without automatically deciding each item's category. That would let users choose retention classes; the question instead requires a way to auto-label matching invoice records.

B:

Site-scoped retention does not require content-level rules to cover every eligible item. That would retain a whole archive by location; the question instead requires a way to auto-label matching invoice records.

C:

Record declaration and disposition settings are functions of suitable retention labels. That would manage record-class content lifecycle; the question instead requires a way to auto-label matching invoice records.


Administering Information Security in Microsoft 365 (SC-401) Practice Tests

Purchase Individually

SC-401 Premium File

Premium File
SC-401 Premium File
291 Q&A
$76.99$69.99

SC-401 Training Video Course

Training Course
SC-401 Training Video Course
101 Lectures
$27.49$24.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.