Microsoft Administering Information Security (SC-401) Certification Sample Questions

The purpose of this Sample Question Set is to provide you with information about the Administering Information Security in Microsoft 365 exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the SC-401 certification test. To get familiar with real exam environment, we suggest you try our Sample Microsoft Administering Information Security Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual Microsoft Certified - Information Security Administrator Associate certification exam.

These sample questions are simple and basic questions that represent likeness to the real Microsoft SC-401 exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium Microsoft Administering Information Security Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.

Microsoft SC-401 Sample Questions:

01. Reference Scenario: SC-401 Case 1 — Litware Health Claims Data Protection

You need to meet the records requirements. When will a signed contract that has the Contract Record label be deleted?

a) Five years after it is created, when the retention policy deletes it

b) Twelve years after it is created, after both retention periods run in sequence

c) Never, because the policy and the label conflict and an administrator must resolve the conflict

d) Seven years after it is created, when the retention period of the label ends

02. What are two benefits of running the Microsoft Purview Information Protection scanner in discovery mode before labels are enforced?

Each correct answer presents part of the solution.

a) It automatically blocks sharing of sensitive content once found

b) It provides visibility into content that requires classification

c) It lets you validate labeling rules without changing any files

d) It encrypts sensitive files as they are scanned

03. Reference Scenario: SC-401 Case 1 — Litware Health Claims Data Protection

You create an Insider Risk Management policy from the Data theft by departing users template. You need to ensure that the policy meets the insider risk requirements. What should you do next?

a) Confirm that auditing is turned on, and scope the policy to all users in the organization

b) Turn on the Microsoft Defender for Endpoint integration in the Insider Risk Management settings

c) Select Microsoft Entra account deletion as the triggering event, so that the policy starts when an account is removed

d) Create an HR data connector that imports resignation dates from the HR system, and use it as the triggering event

04. Your company wants to implement Endpoint DLP for the HR department. Key requirements include:

- Monitoring USB file transfers

- Preventing screenshots of labeled documents

- Viewing user override justifications

Which three steps should you include in your deployment plan?

Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

a) Restrict the Create Windows Recall snapshots activity

b) Enable device risk scoring via Microsoft Defender

c) Require justification on override attempts

d) Configure an Exchange mail flow rule for HR mailboxes

e) Configure Endpoint DLP to monitor removable storage

05. Reference Scenario: SC-401 Case 6 — Alpine Ski House Card Data and Lift Safety Records

You need to respond to the concern of the safety manager. A lift inspection checklist is created in the Lift Operations site, and no user modifies or deletes it. What will happen to the checklist?

a) It is kept for seven years and then stays in the site until a user deletes it

b) It is kept for seven years after its creation and then permanently deleted from the site

c) It is kept indefinitely, because the settings of the two policies conflict

d) It is permanently deleted one year after it is created, when Lift Ops Cleanup takes effect

06. What distinguishes Microsoft Purview Advanced Message Encryption from Microsoft Purview Message Encryption?

a) It allows revocation and expiration of encrypted emails

b) It applies encryption to files stored in OneDrive rather than to mail

c) It extends encryption to Teams chat and channel messages

d) It compresses large email attachments before encryption

07. Reference Scenario: SC-401 Case 6 — Alpine Ski House Card Data and Lift Safety Records

You need to meet the labeling requirements. Which two actions should you perform?

Each correct answer presents part of the solution.

a) Create an auto-labeling policy for Exchange, SharePoint and OneDrive that applies Payment Data to items that contain credit card numbers

b) Set Payment Data as the default label in the Front Desk Labels policy

c) In the Front Desk Labels policy, require users to apply a label to their documents and email

d) Add the Payment Data label to the Front Desk Labels policy

e) In the Payment Data label, turn on auto-labeling for files and emails for the Credit Card Number type, and set it to recommend the label

08. Which Microsoft Purview capability enables integration with Microsoft Defender for Endpoint for device activity indicators?

a) Microsoft Defender for Endpoint advanced hunting queries

b) Activity explorer in the Data classification area

c) Microsoft Defender for Endpoint device onboarding

d) Endpoint data loss prevention policy settings

09. Reference Scenario: SC-401 Case 2 — Fabrikam Export-Controlled Engineering Data

You need to meet the records requirements. Which two actions should you perform?

Each correct answer presents part of the solution.

a) Place each project site on hold in an eDiscovery (Premium) case when the project closes

b) Create a retention label that retains items for ten years after an event of the Project Closure type and then deletes them, and auto-apply it to the project sites

c) Create a retention label named Project Record that retains items for ten years after they are created, and auto-apply it to the project sites

d) When each project closes, create a Project Closure event that specifies the project's ID as the asset ID

e) Create a retention policy for the project sites that retains items for ten years after they were last modified

10. What is the primary function of the Microsoft Purview Information Protection client installed on Windows endpoints?

a) It allows users to classify and label files manually or automatically

b) It applies Microsoft Defender for Endpoint attack surface reduction rules

c) It scans removable media and blocks copying to unapproved devices or drives

d) It evaluates Exchange Online mail against DLP policies

Answers:

Question: 01 Answer: d	Question: 02 Answer: b, c	Question: 03 Answer: d	Question: 04 Answer: a, c, e	Question: 05 Answer: b
Question: 06 Answer: a	Question: 07 Answer: d, e	Question: 08 Answer: c	Question: 09 Answer: b, d	Question: 10 Answer: a

Note: For any error in Microsoft Certified - Information Security Administrator Associate (SC-401) certification exam sample questions, please update us by writing an email on feedback@edusum.com.