Microsoft SC-401 Practice Test 7

Question 60

An analyst needs to know whether a new identifier expression matches real test examples at a given confidence. Which response most directly addresses the stated need?

Enable supported OCR-based classification for targeted policy locations.
Examine aggregate classified-content counts in Data explorer.
Use Content explorer to locate the classified items.
Test the custom SIT using representative labeled samples.

Explanation

Correct Answer

D:

Test samples expose misses and excess matches before production use. It directly meets the case's requirement to evaluate a detector against samples.

Incorrect Answers

A:

OCR adds text extraction to existing classification workflows when supported. That would expand detection into image text; the question instead requires a way to evaluate a detector against samples.

B:

Aggregated classification views support discovery and prioritization. That would compare classified-data volume; the question instead requires a way to evaluate a detector against samples.

C:

Content explorer supports file-level discovery subject to content-read access. That would locate specific matching items; the question instead requires a way to evaluate a detector against samples.

Question 61

A contract must carry encryption and a visible Confidential footer within a Word file; the label targets individual files. Which configuration BEST meets the requirement?

Configure an item sensitivity label with encryption and content marking.
Create a sensitivity label publishing policy targeted to that group.
Configure a container-scoped sensitivity label for site sharing controls.
Enable and apply supported sensitivity labels to Power BI items.

Explanation

Correct Answer

A:

File and email label settings can protect contents and apply supported visual markings. It directly meets the case's requirement to protect and visibly mark a document.

Incorrect Answers

B:

Publishing policies determine which users see and can apply eligible sensitivity labels. That would distribute labels to selected users; the question instead requires a way to protect and visibly mark a document.

C:

Container labels can govern supported site and group settings independently of file encryption. That would govern a SharePoint site's sharing behavior; the question instead requires a way to protect and visibly mark a document.

D:

Power BI sensitivity labeling extends classification to supported reports and semantic model artifacts. That would classify analytical items; the question instead requires a way to protect and visibly mark a document.

Question 62

A SharePoint project site must restrict guest sharing without encrypting every file in it. Which Microsoft Purview approach should the administrator choose?

Configure an item sensitivity label with encryption and content marking.
Configure a container-scoped sensitivity label for site sharing controls.
Enable and apply supported sensitivity labels to Power BI items.
Create a sensitivity label publishing policy targeted to that group.

Explanation

Correct Answer

B:

Container labels can govern supported site and group settings independently of file encryption. It directly meets the case's requirement to govern a SharePoint site's sharing behavior.

Incorrect Answers

A:

File and email label settings can protect contents and apply supported visual markings. That would protect and visibly mark a document; the question instead requires a way to govern a SharePoint site's sharing behavior.

C:

Power BI sensitivity labeling extends classification to supported reports and semantic model artifacts. That would classify analytical items; the question instead requires a way to govern a SharePoint site's sharing behavior.

D:

Publishing policies determine which users see and can apply eligible sensitivity labels. That would distribute labels to selected users; the question instead requires a way to govern a SharePoint site's sharing behavior.

Question 63

The analytics division wants the same data classification to accompany supported Power BI artifacts. Which action most directly satisfies this requirement?

Create a sensitivity label publishing policy targeted to that group.
Configure an item sensitivity label with encryption and content marking.
Enable and apply supported sensitivity labels to Power BI items.
Configure a container-scoped sensitivity label for site sharing controls.

Explanation

Correct Answer

C:

Power BI sensitivity labeling extends classification to supported reports and semantic model artifacts. It directly meets the case's requirement to classify analytical items.

Incorrect Answers

A:

Publishing policies determine which users see and can apply eligible sensitivity labels. That would distribute labels to selected users; the question instead requires a way to classify analytical items.

B:

File and email label settings can protect contents and apply supported visual markings. That would protect and visibly mark a document; the question instead requires a way to classify analytical items.

D:

Container labels can govern supported site and group settings independently of file encryption. That would govern a SharePoint site's sharing behavior; the question instead requires a way to classify analytical items.

Question 64

An administrator must publish only the approved labels to a specific employee group. What is the most appropriate next action?

Configure an item sensitivity label with encryption and content marking.
Enable and apply supported sensitivity labels to Power BI items.
Configure a container-scoped sensitivity label for site sharing controls.
Create a sensitivity label publishing policy targeted to that group.

Explanation

Correct Answer

D:

Publishing policies determine which users see and can apply eligible sensitivity labels. It directly meets the case's requirement to distribute labels to selected users.

Incorrect Answers

A:

File and email label settings can protect contents and apply supported visual markings. That would protect and visibly mark a document; the question instead requires a way to distribute labels to selected users.

B:

Power BI sensitivity labeling extends classification to supported reports and semantic model artifacts. That would classify analytical items; the question instead requires a way to distribute labels to selected users.

C:

Container labels can govern supported site and group settings independently of file encryption. That would govern a SharePoint site's sharing behavior; the question instead requires a way to distribute labels to selected users.

Question 65

A new Confidential label exists in the Purview portal but employees cannot select it in Word. Which response most directly addresses the stated need?

Publish the sensitivity label to the relevant users through a label policy.
Assign a default sensitivity label in the publishing policy.
Publish the relevant parent label and permitted sublabels to the department.
Configure mandatory labeling in an applicable label policy.

Explanation

Correct Answer

A:

Defining a label does not itself grant users access to it in Office applications. It directly meets the case's requirement to make an existing label available.

Incorrect Answers

B:

A default label gives new supported content a starting classification. That would establish a new-document default; the question instead requires a way to make an existing label available.

C:

Published label visibility controls the selectable hierarchy for targeted users. That would restrict sublabel availability by audience; the question instead requires a way to make an existing label available.

D:

Mandatory labeling requires a classification decision in supported labeling experiences. That would require users to classify supported files; the question instead requires a way to make an existing label available.

Question 66

Employees must choose a business-data label when saving supported Office files, reducing unlabeled documents. Which configuration BEST meets the requirement?

Assign a default sensitivity label in the publishing policy.
Configure mandatory labeling in an applicable label policy.
Publish the sensitivity label to the relevant users through a label policy.
Publish the relevant parent label and permitted sublabels to the department.

Explanation

Correct Answer

B:

Mandatory labeling requires a classification decision in supported labeling experiences. It directly meets the case's requirement to require users to classify supported files.

Incorrect Answers

A:

A default label gives new supported content a starting classification. That would establish a new-document default; the question instead requires a way to require users to classify supported files.

C:

Defining a label does not itself grant users access to it in Office applications. That would make an existing label available; the question instead requires a way to require users to classify supported files.

D:

Published label visibility controls the selectable hierarchy for targeted users. That would restrict sublabel availability by audience; the question instead requires a way to require users to classify supported files.

Question 67

A company wants newly authored documents to start with an internal-use classification unless changed. Which Microsoft Purview approach should the administrator choose?

Publish the relevant parent label and permitted sublabels to the department.
Publish the sensitivity label to the relevant users through a label policy.
Assign a default sensitivity label in the publishing policy.
Configure mandatory labeling in an applicable label policy.

Explanation

Correct Answer

C:

A default label gives new supported content a starting classification. It directly meets the case's requirement to establish a new-document default.

Incorrect Answers

A:

Published label visibility controls the selectable hierarchy for targeted users. That would restrict sublabel availability by audience; the question instead requires a way to establish a new-document default.

B:

Defining a label does not itself grant users access to it in Office applications. That would make an existing label available; the question instead requires a way to establish a new-document default.

D:

Mandatory labeling requires a classification decision in supported labeling experiences. That would require users to classify supported files; the question instead requires a way to establish a new-document default.

Question 68

A governance administrator wants only department-approved sublabels offered to a department's staff. Which action most directly satisfies this requirement?

Configure mandatory labeling in an applicable label policy.
Assign a default sensitivity label in the publishing policy.
Publish the sensitivity label to the relevant users through a label policy.
Publish the relevant parent label and permitted sublabels to the department.

Explanation

Correct Answer

D:

Published label visibility controls the selectable hierarchy for targeted users. It directly meets the case's requirement to restrict sublabel availability by audience.

Incorrect Answers

A:

Mandatory labeling requires a classification decision in supported labeling experiences. That would require users to classify supported files; the question instead requires a way to restrict sublabel availability by audience.

B:

A default label gives new supported content a starting classification. That would establish a new-document default; the question instead requires a way to restrict sublabel availability by audience.

C:

Defining a label does not itself grant users access to it in Office applications. That would make an existing label available; the question instead requires a way to restrict sublabel availability by audience.

Question 69

A report containing legal advice must open only for a named law-firm review group even after the file leaves SharePoint. What is the most appropriate next action?

Set label encryption permissions for that authorized group.
Configure rights that omit copying or extraction for that recipient.
Grant the internal user population appropriate rights within the label's encryption settings.
Apply label-based access controls with an appropriate expiration setting.

Explanation

Correct Answer

A:

Sensitivity-label encryption can impose persistent access rights on protected files. It directly meets the case's requirement to restrict portable file access.

Incorrect Answers

B:

Encryption usage rights can limit actions beyond file opening when supported by the client. That would block extraction while permitting reading; the question instead requires a way to restrict portable file access.

C:

Label-based permissions define who can open and use protected content. That would enforce internal-only rights; the question instead requires a way to restrict portable file access.

D:

Rights-management protection can time-limit authorized access to protected content. That would time-limit encrypted document access; the question instead requires a way to restrict portable file access.

Question 70

A collaboration file should remain readable by all authorized employees but not external identities. Which response most directly addresses the stated need?

Apply label-based access controls with an appropriate expiration setting.
Grant the internal user population appropriate rights within the label's encryption settings.
Set label encryption permissions for that authorized group.
Configure rights that omit copying or extraction for that recipient.

Explanation

Correct Answer

B:

Label-based permissions define who can open and use protected content. It directly meets the case's requirement to enforce internal-only rights.

Incorrect Answers

A:

Rights-management protection can time-limit authorized access to protected content. That would time-limit encrypted document access; the question instead requires a way to enforce internal-only rights.

C:

Sensitivity-label encryption can impose persistent access rights on protected files. That would restrict portable file access; the question instead requires a way to enforce internal-only rights.

D:

Encryption usage rights can limit actions beyond file opening when supported by the client. That would block extraction while permitting reading; the question instead requires a way to enforce internal-only rights.

Pass Your Microsoft SC-401 Exam Easy!

Question 60

Explanation

Correct Answer

Incorrect Answers

Question 61

Explanation

Correct Answer

Incorrect Answers

Question 62

Explanation

Correct Answer

Incorrect Answers

Question 63

Explanation

Correct Answer

Incorrect Answers

Question 64

Explanation

Correct Answer

Incorrect Answers

Question 65

Explanation

Correct Answer

Incorrect Answers

Question 66

Explanation

Correct Answer

Incorrect Answers

Question 67

Explanation

Correct Answer

Incorrect Answers

Question 68

Explanation

Correct Answer

Incorrect Answers

Question 69

Explanation

Correct Answer

Incorrect Answers

Question 70

Explanation

Correct Answer

Incorrect Answers

Administering Information Security in Microsoft 365 (SC-401) Practice Tests