Question 270
A policy targets cloud email only, yet IT expects it to block local USB copies. Which response most directly addresses the stated need?
Explanation
Correct Answer
Device operations are not covered merely by selecting an Exchange policy location. It directly meets the case's requirement to extend DLP to local USB transfers.
Incorrect Answers
Combined targeting has documented semantics that require testing to avoid unexpected enforcement. That would resolve compound endpoint policy targeting; the question instead requires a way to extend DLP to local USB transfers.
Exclusion controls can prevent specific managed devices from receiving selected restrictions. That would exempt a maintenance device deliberately; the question instead requires a way to extend DLP to local USB transfers.
Endpoint policy targeting can combine identities and devices subject to documented behavior. That would limit Endpoint DLP to intended users; the question instead requires a way to extend DLP to local USB transfers.





Administering Information Security in Microsoft 365 (SC-401) Practice Tests