Free Microsoft SC-401 Practice Test & Real Exam Questions
You have a Microsoft 365 E5 subscription that uses Microsoft Purview.
You create a communication compliance policy named Policy1 and select Detect Microsoft Copilot interactions.
Which two trainable classifiers will be added to Policy1 automatically? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You create a communication compliance policy named Policy1 and select Detect Microsoft Copilot interactions.
Which two trainable classifiers will be added to Policy1 automatically? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Correct Answer: B,C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You have a Microsoft 365 E5 tenant that contains the policies shown in the following table.

A file named File1 has all the policies applied.
How long will File1 be retained?

A file named File1 has all the policies applied.
How long will File1 be retained?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You have a Microsoft 365 E5 subscription that contains a trainable classifier named Trainable1.
You plan to create the items shown in the following table.

Which items can use Trainable 1?
You plan to create the items shown in the following table.

Which items can use Trainable 1?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You have a Microsoft 365 E5 subscription that contains a Windows 11 device named Device1 and three users named User1, User2, and User3.
You plan to deploy Azure information Protection (AIP) and the Microsoft Purview information Protection client to Device1.
You need to ensure that the users can perform the following actions on Device1 as part of the planned deployment:
- User1 will test the functionality of the client.
- User2 will install and configure the Microsoft Rights Management
connector.
- User3 will be configured as the service account for the information
protection scanner.
The solution must maximize the security of the sign-in process for the users.
What should you do?
You plan to deploy Azure information Protection (AIP) and the Microsoft Purview information Protection client to Device1.
You need to ensure that the users can perform the following actions on Device1 as part of the planned deployment:
- User1 will test the functionality of the client.
- User2 will install and configure the Microsoft Rights Management
connector.
- User3 will be configured as the service account for the information
protection scanner.
The solution must maximize the security of the sign-in process for the users.
What should you do?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Hotspot Question
You have a Microsoft 365 subscription that contains the sensitive information types (SITs) shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

You have a Microsoft 365 subscription that contains the sensitive information types (SITs) shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: all of the SITs
There are two methods for creating a new SIT:
Create a new SIT from scratch
Copy and modify an existing SIT
Copy and modify an existing SIT
These SITs can't be copied:
Canada driver's license number
EU driver's license number
EU national identification number
EU passport number
EU social security number or equivalent identification
EU tax identification number
International classification of diseases (ICD-10-CM)
International classification of diseases (ICD-9-CM)
U.S. driver's license number
Box 2: Adatum document patterns and Adaturm numbers only
Reference:
https://learn.microsoft.com/en-us/purview/sit-create-a-custom-sensitive-information-type
You have a Microsoft 365 E5 subscription that contains the adaptive scopes shown in the following table.

You create the retention policies shown in the following table.

Which retention policies support a preservation lock?

You create the retention policies shown in the following table.

Which retention policies support a preservation lock?
Correct Answer: E
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You need to be alerted when users share sensitive documents from Microsoft OneDrive to any users outside your company. What should you do?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
SIMULATION
Username and password
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and select the username below.
To enter your password, place your cursor in the Enter password box and select the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: XXXXXXXXX
If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL "https://admin microsoft.com", and press Enter.
The following information is for technical support purposes only:
Lab Instance: XXXXXXXX.
Task 2
You discover that all users can apply the Confidential - Finance label.
You need to ensure that the Confidential - Finance label is available only to the members of the Leadership group.
Username and password
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and select the username below.
To enter your password, place your cursor in the Enter password box and select the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: XXXXXXXXX
If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL "https://admin microsoft.com", and press Enter.
The following information is for technical support purposes only:
Lab Instance: XXXXXXXX.
Task 2
You discover that all users can apply the Confidential - Finance label.
You need to ensure that the Confidential - Finance label is available only to the members of the Leadership group.
Correct Answer:
Assign sensitivity labels to Microsoft 365 groups in Microsoft Entra ID Microsoft Entra ID supports applying sensitivity labels published by the Microsoft Purview compliance portal to Microsoft 365 groups. Sensitivity labels apply to groups across services like Outlook, Microsoft Teams, and SharePoint.
Assign a label to an existing group in the Microsoft Entra admin center Step 1: Sign in to the Microsoft Entra admin center as at least a Global Administrator.
Step 2: Select Microsoft Entra ID.
Step 3: Select Groups
Step 4: From the All groups page, select the group that you want to label.
Step 5: On the selected group's page, select Properties and select a sensitivity label from the list.
Select the Confidential - Finance label

Step 6: Select Save to save your changes.
Reference:
https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels
Assign a label to an existing group in the Microsoft Entra admin center Step 1: Sign in to the Microsoft Entra admin center as at least a Global Administrator.
Step 2: Select Microsoft Entra ID.
Step 3: Select Groups
Step 4: From the All groups page, select the group that you want to label.
Step 5: On the selected group's page, select Properties and select a sensitivity label from the list.
Select the Confidential - Finance label

Step 6: Select Save to save your changes.
Reference:
https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels
Hotspot Question
You have a Microsoft 365 subscription.
You identify the following data loss prevention (DLP) requirements:
- Send notifications to users if they attempt to send attachments that
contain an EU Social Security Number (SSN) or Equivalent ID.
- Prevent any email messages that contain credit card numbers from
being sent outside your organization.
- Block the external sharing of Microsoft OneDrive content that
contains EU passport numbers.
- Send administrators email alerts if any rule matches occur.
What is the minimum number of DLP policies and rules you must create to meet the requirements? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have a Microsoft 365 subscription.
You identify the following data loss prevention (DLP) requirements:
- Send notifications to users if they attempt to send attachments that
contain an EU Social Security Number (SSN) or Equivalent ID.
- Prevent any email messages that contain credit card numbers from
being sent outside your organization.
- Block the external sharing of Microsoft OneDrive content that
contains EU passport numbers.
- Send administrators email alerts if any rule matches occur.
What is the minimum number of DLP policies and rules you must create to meet the requirements? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

You need to be alerted when users share sensitive documents from Microsoft OneDrive to any users outside your company.
What should you do?
What should you do?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
