無料更新されたMicrosoft SC-400テストエンジン問題には325問あります [Q164-Q185]

無料更新されたMicrosoft SC-400テストエンジン問題には325問あります

ベストな問題集を使おうMicrosoft Certified: Information Protection Administrator Associate SC-400専門試験問題

Microsoft SC-400試験は、情報保護分野の専門家のスキルと知識を試験する包括的な認定試験です。Microsoft 365ワークロード、情報保護コンセプト、およびテクノロジに経験がある個人を対象としています。この試験に合格することは、さまざまなMicrosoft 365ワークロード全体でMicrosoft Information Protectionソリューションを実装および管理できる能力を示し、情報保護分野での専門家のキャリアアップに役立ちます。

この試験では、Microsoft情報保護ソリューションの設計と実装、データ損失防止ポリシーの構成、ラベルの管理、データの分類など、幅広いトピックをカバーしています。また、コンプライアンス要件に関する候補者の知識と、Microsoft Technologiesを使用してコンプライアンスソリューションを実装および管理する方法をテストします。

Microsoft SC-400認定試験に合格すると、Microsoftのデータ保護ソリューションとベストプラクティスを完全に理解していることが示されています。この認定は、データ保護責任者、データセキュリティアナリスト、情報保護マネージャーなどの役割で働く専門家に最適です。また、情報セキュリティとデータ保護の分野でキャリアを前進させようとしている人にも適しています。この認定を取得することにより、専門家は、デリケートなデータを保護し、規制と業界の基準の遵守を確保するための専門知識を紹介できます。

質問 # 164
You have a Microsoft 365 E5 subscription that contains a user named User1 and the groups shown in the following table.

You plan to create a communication compliance policy named Policy1.
You need to identify whose communications can be monitored by Policy1, and who can be assigned the Reviewer role for Policy1.
Who should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 165
You plan to implement a sensitive information type based on a trainable classifier. The sensitive information type will identify employment contracts.
You need to copy the required files to Microsoft SharePoint Online folders to train the classifier.
What should you use to seed content and test the classifier? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide

質問 # 166
You have a Microsoft 365 E5 tenant that contains the policies shown in the following table.

A file named File1 has all the policies applied.
How long will File1 be retained?

A. File1 will be retained until the file is deleted manually.
B. File1 will be deleted automatically after 10 years.
C. File1 will be deleted automatically after five years.
D. File1 will be deleted automatically after seven years.

正解：B

質問 # 167
You have a Microsoft 365 tenant.
A retention hold is applied to all the mailboxes in Microsoft Exchange Online.
A user named User1 leaves your company, and the account of User1 is deleted from Azure Active Directory (Azure AD).
You need to create a new user named User2 and provide User2 with access to the mailbox of User1.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation
Graphical user interface, text, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/recover-an-inactive-mailbox?view=o365-worldwide

質問 # 168
You have a Microsoft 365 E5 tenant that uses a domain named contoso.com.
A user named User1 sends link-based, branded emails that are encrypted by using Microsoft Office 365 Advanced Message Encryption to the recipients shown in the following table.

For which recipients can User1 revoke the emails?

A. Recipient4 only
B. Recipient3 and Recipient4 only
C. Recipient1 only
D. Recipient1 and Recipient2 only
E. Recipient1, Recipient2, Recipient3, and Recipient4

正解：A

解説：
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/revoke-ome-encrypted-mail?view=o365-worldwide

質問 # 169
You recently discovered that the developers at your company emailed Azure Storage Account keys in plain text to third parties.
You need to ensure that when Azure Storage Account keys are emailed, the emails are encrypted.
Solution: You create a data loss prevention (DLP) policy that has Exchange email, SharePoint sites, OneDrive accounts, and Teams chat and channel messages selected.
Does this meet the goal?

A. Yes
B. No

正解：B

解説：
Explanation:

質問 # 170
You have a Microsoft 365 tenant that has devices onboarded to Microsoft Defender for Endpoint as shown in the following table.

You plan to start using Microsoft 365 Endpoint data loss protection (Endpoint DLP).
Which devices support Endpoint DLP?

A. Device1 and Device2 only
B. Device3 and Device4 only
C. Device2 only
D. Device5 only
E. Device 1, Device2, Device3, Device4, and Device5

正解：A

解説：
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365-worldwide

質問 # 171
You need to recommend an information governance solution that meets the HR requirements for handling employment applications and resumes.
What is the minimum number of information governance solution components that you should create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-retention-labels-automatically?view=o365-worldwide

質問 # 172
You have a Microsoft 365 subscription.
You have a user named User1. Several users have full access to the mailbox of User1.
Some email messages sent to User1 appear to have been read and deleted before the user viewed them.
When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1.
YOU run the Set-AdminAuditLogConfig -AdminAuditLogEnabled $true -AdminiAuditLogCmdlets
"Mailbox* command.
Does that meet the goal?

A. Yes
B. No

正解：B

質問 # 173
You have a Microsoft 365 E5 tenant that contains three groups named Group1, Group2, and Group3.
You have the users shown in the following table.

You have the sensitivity labels shown in the following exhibit.

You have the label policies shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

質問 # 174
You are creating a custom trainable classifier to identify organizational product codes referenced in Microsoft
365 content.
You identify 300 files to use as seed content.
Where should you store the seed content?

A. an Azure file share
B. a Microsoft SharePoint Online folder
C. Microsoft Exchange Online shared mailbox
D. a Microsoft OneDrive for Business folder

正解：B

解説：
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide
Topic 1, Contoso
SharePoint Online Environment
Contoso has four Microsoft SharePoint Online sites named Site1. Site2. Site3. and Site4.
Site2 contains the files shown in the following table.

Two users named User1 and User2 are assigned roles for Site2 as shown in the following table.

Sile3 stores documents related to the company's projects. The documents are organized In a folder hierarchy based on the project.
Slte4 has the following two retention policies applied:
* Name: SitetKetentionPolicy1
* Locations to apply the policy: Site4
* Delete items older than:2 years
* Delete content based on: When items were created
* Name: Site4RetentionPolicy2
* Locations to apply the policy. Sile4
* Retain items for a specific period: 4 years
* Start the retention period based on: When items were created
* At the end of the retention period: Do nothing
Problem Statements
Management at Contoso is concerned about data leaks. On several occasions, confidential research departments were leaked.
Planned Changes
Contoso plans to create the following data loss prevention (DLP) policy:
* Name: DLPpolicy1
* Locations to apply the policy; Site2
* Conditions:
* Content contains any of these sensitive info types: SWIF F Code
* Instance count: 2 to any
* Actions: Restrict access to the content
Technical Requirements
Contoso must meet the following technical requirements:
* All administrative users must be able to review DLP reports.
* Whenever possible, the principle of least privilege must be used.
* For all users, all Microsoft 365 data must be retained for at least one year.
* Confidential documents must be detected and protected by using Microsoft 365.
* Site1 documents that include credit card numbers must be labeled automatically.
* All administrative users must be able to create Microsoft 365 sensitivity labels.
* After a project is complete, the documents in Site3 that relate to the project must be retained for 10 years

質問 # 175
While creating a retention label, you discover that the following options are missing:
* Mark items as a record
* Mark items are a regular record
You need to ensure that the options are available when you create label in the Microsoft 365 compliance center.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 176
You have a data loss prevention (DLP) policy configured for endpoints as shown in the following exhibit.

From a computer named Computer1, 3 user can sometimes upload files to cloud services and sometimes cannot. Other users experience the same issue. What are two possible causes of the issue? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. The Copy to clipboard action is set to Audit only.
B. There are file path exclusions in the Microsoft 365 Endpoint data loss prevention (Endpoint DIP) settings.
C. The unallowed browsers in the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings are NOT configured.
D. The Access by unallowed apps action is set to Audit only.
E. The computers are NOT onboarded to the Microsoft 365 compliance center.

正解：B、C

質問 # 177
You create three sensitivity labels named Sensitivity1, Sensitivity2, and Sensitivity3 and perform the following actions:
Publish Sensitivity1.
Create an auto-labeling policy for Sensitivity2.
You plan to create a file policy named Policy1 in Microsoft Cloud App Security.
Which sensitivity labels can you apply to Microsoft SharePoint Online in Policy1?

A. Sensitivity1, Sensitivity2, and Sensitivity3
B. Sensitivity1 and Sensitivity2 only
C. Sensitivity1 only
D. Sensitivity2 only

正解：B

解説：
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365- worldwide
https://docs.microsoft.com/en-us/cloud-app-security/azip-integration

質問 # 178
You have a Microsoft 365 E5 tenant.
You create sensitivity labels as shown in the Sensitivity Labels exhibit.

The Confidential/External sensitivity label is configured to encrypt files and emails when applied to content.
The sensitivity labels are published as shown in the Published exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

質問 # 179
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You need to prevent users in the finance department from sharing files with users in the research department.
Which type of policy should you configure?

A. information barrier
B. communication compliance
C. Conditional Access
D. insider risk management

正解：A

質問 # 180
You have a Microsoft 365 E5 subscription that contains a trainable classifier named Trainable1. You plan to create the items shown in the following table.

Which items can use Trainable1?

A. Label2 only
B. Label2 Policy1, and DLP1 only
C. Label1 and Policy1 only
D. Label1, Label2, Policy1, and DLP1
E. Label1 and Label2 only

正解：A

質問 # 181
You plan to create a custom trainable classifier based on an organizational form template.
You need to identity which role based access control (RBAC ) role is required to create the trainable classifier and where to classifier. The solution must use the principle of least privilege.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide#prepare-for-a-custom-trainable-classifier

質問 # 182
You have a Microsoft 365 E5 tenant that contains a user named User1.
You need to identify the type and number of holds placed on the mailbox of User1.
What should you do first?

A. From the Microsoft 365 compliance center, run a content search.
B. From Exchange Online PowerShell. run the Get-HoldCompliancePolicy cmdlet.
C. From the Microsoft 365 compliance center, create an eDiscovery case.
D. From Exchange Online PowerShell. run the Gee-Mailbox cmdlet.

正解：D

解説：
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/identify-a-hold-on-an-exchange-online-mailbox?vie

質問 # 183
You need to recommend a solution that meets the compliance requirements for viewing DLP tooltip
justifications.
What should you recommend?

A. Configure an Azure logic app to route DLP notification emails to the compliance department.
B. Instruct the compliance department users to review the False positive and override report.
C. Instruct the compliance department users to review the DLP incidents report.
D. Configure a Microsoft Power Automate workflow to route DLP notification emails to the compliance
department.

正解：B

解説：
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/view-the-dlp-reports?view=o365-worldwide

質問 # 184
You have Microsoft 365 E5 tenant that has a domain name of M365x925027.onmicrosoft.com.
You have a published sensitivity label.
The Encryption settings for the sensitivity label are configured as shown in the exhibit.

For each of the following statements, select Yes if statement is true. Otherwise, select No NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/encryption-sensitivity-labels?view=o365-worldwide
https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights