SC-401 Administering Information Security in Microsoft 365

A legal team wants a retention label to mark completed contracts as regulatory records that cannot be edited or deleted by users. Which setting should be enabled?

• A.Mark the label as a regulatory record
• B.Apply a retention lock to a DLP rule
• C.Enable user notifications
• D.Configure a sensitivity label expiration

A DLP policy should detect sensitive data in SharePoint and OneDrive but only for a selected set of users. What should the administrator configure?

• A.A policy scope using adaptive or included user locations
• B.A tenant-wide retention label
• C.A communication compliance policy
• D.An eDiscovery case

A security team wants to review user activity that might expose confidential data, with cases assigned to investigators. Which solution should they use?

• A.Insider Risk Management
• B.Data Lifecycle Management
• C.Audit Standard
• D.Information Barriers

A Purview administrator needs to find emails and documents matching a legal request, then preserve relevant items. Which workflow is best?

• A.eDiscovery case with a search and hold
• B.Sensitivity label publishing
• C.Endpoint DLP alert
• D.Communication Compliance policy

An organization wants users to encrypt email with a specific sensitivity label in Outlook and apply the same classification to attachments. What is required?

• A.Configure the sensitivity label for encryption and publish it to users
• B.Create an audit retention policy
• C.Use a retention event
• D.Assign a compliance boundary