SC-401 試験問題を無料オンラインアクセス

You have Microsoft 365 E5 subscription that uses data loss prevention (DLP) to protect sensitive information.
You have a document named Form.docx.
You plan to use PowerShell to create a document fingerprint based on Form.docx.
You need to first connect to the subscription.
Which cmdlet should you run?

• A.Connect-ExchangeOnline
• B.Connect-SPOService
• C.Connect-MgGraph
• D.Connect-IPPSSession

Hotspot Question
You have a Microsoft 365 E5 subscription that contains three users named User, User2, and User3. The subscription contains the groups shown in the following table.

The subscription contains the devices shown in the following table.

All the devices are onboarded to Microsoft Purview.
You have the data loss prevention (DLP) policies shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

Explanation:
Box 1: Yes
User1 is member of Group1 and of Group3.
Device1 is Windows.
Policy1 is assigned to Group1, and restrict copying to USB [assume this is the intended word] devices.
Note:
Supported actions: Devices
You can tell DLP to Allow, Audit only, Block with override, or Block (the actions) these user activities for onboarded Windows devices.
Box 2: No
User2 is member of Group2 and of Group3.
Device1 is Android.
The device actions do not apply for Android devices.
Box 3: Yes
User3 is member of Group 1, Group2 and of Group3.
Device1 is macOS.
Policy3 is assigned to Group3, and restricts accessing corporate content in Microsoft 365 locations.
Reference:
https://learn.microsoft.com/en-us/purview/dlp-policy-reference

SIMULATION
Username and password
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and select the username below.
To enter your password, place your cursor in the Enter password box and select the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: XXXXXXXXX
If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL "https://admin.microsoft.com", and press Enter.
The following information is for technical support purposes only:
Lab Instance: XXXXXXXXX
Task 3
You need to create a retention label that retains items for 10 years starting from June 1, 2025.
The items must be deleted after the retention period.
You do NOT need to publish or auto-apply the label at this time.

正解：

To create a retention label, sign in to the Microsoft Purview portal and navigate to Solutions > Records management > Policies. Select Publish labels and follow the prompts to configure the label's settings, retention period, and what happens after the period ends.
Step 1: Sign in to the Microsoft Purview portal. You can access it by going to the Microsoft 365 app launcher and selecting "Compliance".
Step 2: In the Microsoft Purview portal, go to Solutions > Records management > Policies and click on Publish labels.
Step 3: Create and configure the retention label
Make the following choices:
Retain items for a specific period: Select 10 years
Start the retention period based: Select June 1, 2025 as start date
At the end of the retention period: Delete items automatically.

Reference:
https://learn.microsoft.com/en-us/purview/retention-settings

You are creating a data loss prevention (DLP) policy that will apply to all available locations except Fabric and Power BI workspaces.
You configure an advanced DLP rule in the policy.
Which type of condition can you use in the rule?

• A.Keywords
• B.Sensitive info type
• C.Sensitive label
• D.Content search query

Hotspot Question
You have a Microsoft 365 E5 tenant that contains a published sensitivity label named Sensitivity1.
You plan to create a Microsoft Entra group named Group1 and assign Sensitivity1 to Group1.
How should you configure Group1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

Explanation:
Box 1: EnableMIPLabels
Enable sensitivity label support in PowerShell
To apply published labels to groups, you must first enable the feature. These steps enable the feature in Microsoft Entra ID. The Microsoft Graph PowerShell SDK comes in two modules, Microsoft.Graph and Microsoft.Graph.Beta.
Box 2: Microsoft 365
Assign sensitivity labels to Microsoft 365 groups in Microsoft Entra ID Microsoft Entra ID supports applying sensitivity labels to Microsoft 365 groups when those labels are published in the Microsoft Purview portal or the Microsoft Purview compliance portal and the labels are configured for groups and sites.
Sensitivity labels can be applied to groups across apps and services such as Outlook, Microsoft Teams, and SharePoint.
Reference:
https://learn.microsoft.com/en-us/entra/identity/users/groups-assign-sensitivity-labels