[Dec 23, 2025] Get Latest and 100% Accurate SC-400 Exam Questions [Q22-Q40]

December 23, 2025 admin 0

Categories : SC-400 , Microsoft

Rate this post

[Dec 23, 2025] Get Latest and 100% Accurate SC-400 Exam Questions

Maximum Grades By Making ready With SC-400 Dumps

Microsoft SC-400 (Microsoft Information Protection Administrator) Exam is a certification exam that measures the skills and knowledge of professionals in the field of information protection. It is designed to test their ability to implement, manage, and monitor Microsoft Information Protection solutions. Microsoft Information Protection Administrator certification exam is intended for individuals who have a deep understanding of Microsoft 365 workloads and experience with information protection concepts, policies, and technologies.

The Microsoft Information Protection Administrator certification exam covers various topics, including implementing and managing Microsoft Information Protection solutions, configuring data loss prevention policies, managing sensitivity labels, and monitoring and reporting on information protection solutions. SC-400 exam is designed to test the candidate’s knowledge and skills in managing and implementing information protection solutions using Microsoft technologies.

NEW QUESTION 22
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth is worth one point.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide

NEW QUESTION 23
You have a Microsoft 365 sensitivity label that is published to all the users in your Azure AD tenant as shown in the following exhibit.

NEW QUESTION 24
You need to implement a solution to encrypt email. The solution must meet the compliance requirements.
What should you create in the Exchange admin center and the Microsoft 36.S compliance center? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

Users must be able to manually select that email messages are sent encrypted. The encryption will use Office
365 Message Encryption (OME) v2. Any email containing an attachment that has the Fabrikam Confidential sensitivity label applied must be encrypted automatically by using OME.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/ome-sensitive-info-types?view=o365-worldwide

NEW QUESTION 25
You have a Microsoft 365 E5 tenant that contains a user named User1.
You need to identify the type and number of holds placed on the mailbox of User1.
What should you do first?

From the Microsoft 365 compliance center, create an eDiscovery case.

From Exchange Online PowerShell, run the Get-Mailboxcmdlet.

From the Microsoft 365 compliance center, run a content search.

From Exchange Online PowerShell, run the Get-HoldCompliancePolicycmdlet.

Get-Mailbox cmdlet can be used to find out retention policies for a specific mailbox and also find out holds placed in the mailbox.
https://docs.microsoft.com/en-us/microsoft-365/compliance/identify-a-hold-on-an-exchange- online-mailbox?view=o365-worldwide

NEW QUESTION 26
You have a Microsoft 365 tenant that contains the users shown in the following table.

You configure a retention label to trigger a disposition review at the end of the retention period.
Which users can access the Disposition tab in the Microsoft 365 compliance center to review the content?

User1 only

User2 only

User3 only

User1 and User3

User3 and User4

Reference:
D18912E1457D5D1DDCBD40AB3BF70D5D
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/permissions-in-the-security-andcompliance-center?view=o365-worldwide

NEW QUESTION 27
You are configuring a data loss prevention (DLP) policy to report when credit card data is found on a Windows
10 device joined to Azure Active Directory (Azure AD).
You plan to use information from the policy to restrict the ability to copy the sensitive data to the clipboard.
What should you configure in the policy rule?

the incident report

an action

user notifications

user overrides

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-using?view=o365-worldwide

NEW QUESTION 28
A user reports that she can no longer access a Microsoft Excel file named Northwind Customer Data.xlsx.
From the Cloud App Security portal, you discover the alert shown in the exhibit.

You restore the file from quarantine.
You need to prevent files that match the policy from being quarantined. Files that match the policy must generate an alert.
What should you do?

Modify the policy template.

Assign the Global reader role to the file owners.

Exclude file matching by using a regular expression.

Update the governance action.

Reference:
https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies#create-a-new-file-policy

NEW QUESTION 29
You have a Microsoft 365 E5 subscription.
You need to export the details of a retention label. The export must include the following information:
– Is record
– Is regulatory
– Disposition type
What should you do?

From the Microsoft Purview compliance portal, export Compliance Manager assessment actions.

From the Microsoft Purview compliance portal export a file plan.

From the Microsoft Purview compliance portal, export a disposition review.

From PowerShell, run the Export-ActivityExplorerData cmdlet.

From PowerShell, run the Get-RetentionEvent cmdlet.

NEW QUESTION 30
You have a Microsoft 365 subscription that has Enable Security defaults set to No in Azure AD.
You have a custom compliance manager template named Regulation1.
You have the assessments shown in the following table.
Assessment1 has the improvement actions shown in the following table.
Assessment2 has the improvement actions shown in the following table.
You perform the following actions:
* For Assessment2, change the Test status of Establish a threat intelligence program to Implemented.
* Enable multi-factor authentication (MFA) for all users.
* Configure a privileged access policy.
For each of the following statements, select Yes if the statement is true. Otherwise select No.
NOTE: Each correct selection is worth one point.

NEW QUESTION 31
You need to recommend an information governance solution that meets the HR requirements for handling employment applications and resumes.
What is the minimum number of information governance solution components that you should create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:
Graphical user interface, text, application, email Description automatically generated

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-retention-labels-automatically?view=o365-wo

NEW QUESTION 32
You have a Microsoft 365 tenant that contains a Microsoft SharePoint Online site named Site1.
You have the users shown in the following table.

You create a data loss prevention (DLP) policy for Site1 that detects credit card number information. You configure the policy to use the following protection action:
When content matches the policy conditions, show policy tips to users and send them an email notification.
You use the default notification settings.
To Site1, User1 uploads a file that contains a credit card number.
Which users receive an email notification?

Used and User2 only

Used and User4 only

Used, User2, User3, and User4

Used only

Used and User3 only

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-the-default-dlp-policy?view=o365-worldwide

NEW QUESTION 33
You create three sensitivity labels named Sensitivity1, Sensitivity2, and Sensitivity3 and perform the following actions:
* Publish Sensitivity1.
* Create an auto-labeling policy for Sensitivity2.
You plan to create a file policy named Policy1 in Microsoft Cloud App Security.
Which sensitivity labels can you apply to Microsoft SharePoint Online in Policy1?

Sensitivity1 only

Sensitivity1, Sensitivity2, and Sensitivity3

Sensitivity2 only

Sensitivity1 and Sensitivity2 only

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365- worldwide
https://docs.microsof HYPERLINK “https://docs.microsoft.com/en-us/cloud-app-security/azip-integration”t.
com/en-us/cloud-app HYPERLINK “https://docs.microsoft.com/en-us/cloud-app-security/azip-integration”- security/a HYPERLINK “https://docs.microsoft.com/en-us/cloud-app-security/azip-integration”zip-integration

NEW QUESTION 34
You create a data loss prevention (DLP) policy that meets the following requirements:
Prevents guest users from accessing a sensitive document shared during a Microsoft Teams chat Prevents guest users from accessing a sensitive document stored in a Microsoft Teams channel Which location should you select for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-microsoft-teams?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoftteams/sharepoint-onedrive-interact

NEW QUESTION 35
Hotspot Question
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You need to delegate the following tasks:
– Configure role group assignments for communication compliance.
– Update and view the status of communication compliance alerts.
Which users can perform each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NEW QUESTION 36
You have a Microsoft 365 E5 subscription that contains a data loss prevention (DLP) policy named DLP1.
DLP1 contains the DLP rules shown in the table.

You need to ensure that when a document matches all the rules, users will see Tip 2. What should you change?

the priority setting of Rule2 to 0

the priority setting of Rule2 to 2

the priority setting of Rule3 and Rule4 to 0

the If there’s a match for this rule, stop processing additional DLP policies and rules setting for Rule3 to Enabled

NEW QUESTION 37
Hotspot Question
You have a Microsoft E5 subscription that contains two users named User1 and User2.
You have a Microsoft SharePoint site named Site1. Site1 stores files that contain IP addresses as shown in the following table.

User1 is assigned the SharePoint admin role for Site1. User2 is a member of Site1.
You create the data loss prevention (DLP) policy shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NEW QUESTION 38
Your company has a Microsoft 365 tenant that uses a domain named contoso.com.
You are implementing data loss prevention (DLP).
The company’s default browser is Microsoft Edge.
During a recent audit, you discover that some users use Firefox and Google Chrome browsers to upload files labeled as Confidential to a third-party Microsoft SharePoint Online site that has a URL of
https://m365x076709.sharepoint.com. Users are blocked from uploading the confidential files to the site from Microsoft Edge.
You need to ensure that the users cannot upload files labeled as Confidential from Firefox and Google Chrome to any cloud services.
Which two actions should you perform? Each correct answer presents part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.

From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add m365x076709.sharepoint.com as a blocked service domain.

Create a DLP policy that applies to the Devices location.

From the Microsoft 365 Endpoint data loss prevention (Endpoint DLP) settings, add Firefox and Google Chrome to the unallowed browsers list.

From the Microsoft 365 compliance center, onboard the devices.

From the Microsoft 365 Endpoint data loss prevention (Endpoint) DLP settings, add contoso.com as an allowed service domain.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365-worldwide

NEW QUESTION 39
You have a Microsoft 365 E5 tenant that contains two users named User1 and User2 and a Microsoft SharePoint Online site named Site1 as shown in the following exhibit.

For Site1, the users are assigned the roles shown in the following table.

You publish a retention label named Retention1 to Site1.
To which files can the users apply Retention!? To answer, select the appropriate options in the answer area.

NEW QUESTION 40
You have a Microsoft 365 subscription.
You create a retention label named Label! as shown in the following exhibit.

You publish Label1 to SharePoint sites.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.