Free SC-400 sample questions

Real questions from the Information Protection Administrator practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 10 of 20 free sample questions.

Question 1Choose one

A healthcare organization is configuring Microsoft Purview Insider Risk Management to detect potential HIPAA data violations. They have connected their HR system, which provides employee termination dates. A policy needs to be created that specifically monitors for high-volume downloads of files containing patient health information (PHI) from SharePoint Online by employees within 30 days of their termination date. What is the most critical prerequisite for this policy to function effectively?

Question 2Choose one

An administrator at a manufacturing company has created a file plan in Microsoft Purview Records Management. They have defined several retention labels, including 'Engineering-Blueprints' which is configured to mark items as a regulatory record. The administrator now needs to ensure that this label is automatically applied to all documents within a specific SharePoint document library named 'Active Projects\Final Blueprints'. What is the most direct method to achieve this?

Question 3Choose one

True or False: After a Preservation Lock is applied to a retention policy in the Microsoft Purview compliance portal, a Global Administrator can remove the lock if a valid business or legal justification is provided through a Microsoft support case.

Question 4Choose one

A multinational corporation uses Microsoft Teams for collaboration between its Research and Development (R&D) and Sales departments. To prevent conflicts of interest and protect sensitive intellectual property, the company needs to prevent users in the R&D department from communicating via chat or calls with users in the Sales department. However, both departments must be able to communicate with the Legal department. Which Microsoft Purview solution should be implemented to enforce this communication boundary?

Question 5Choose one

A consultant is tasked with creating a custom sensitive information type (SIT) to detect a new, internally developed project code format: `PROJ-` followed by two uppercase letters and four digits (e.g., `PROJ-AB1234`). The consultant needs to define a regular expression that has a high confidence level and minimizes false positives. Which of the following regular expressions is the most accurate and efficient for this requirement?

Question 6Choose one

An eDiscovery manager for a global enterprise is preparing for litigation. The case involves custodians located in both Germany and the United States. Due to data residency regulations, data for German custodians must be processed and stored within the European Union. The manager needs to create a single eDiscovery (Premium) case to manage the litigation efficiently while respecting these regional data boundaries. What feature within Microsoft Purview eDiscovery (Premium) must be configured when creating the case to meet this requirement?

Question 7Choose one

A university is using trainable classifiers to identify student admission forms. After initial training with 250 positive examples, the classifier is performing with low accuracy, frequently misclassifying research papers as admission forms. A compliance administrator has collected an additional 50 admission forms and 200 research papers. What is the correct next step to improve the classifier's performance?

Question 8Choose one

**Case Study:** Contoso, Ltd. is a global consulting firm with a new Chief Compliance Officer (CCO) who has mandated a complete overhaul of the company's data governance strategy using Microsoft Purview. The primary goal is to automatically classify and protect sensitive client data without impeding employee productivity. **Existing Environment:** Contoso uses Microsoft 365 E5 licenses. All employees store documents in SharePoint Online and OneDrive for Business and use Exchange Online for email. A basic sensitivity label structure (Public, Internal, Confidential) exists but is applied manually and inconsistently. **Key Requirements:** 1. **Project Proposals:** Documents containing the keyword "Project Proposal" and a custom sensitive info type for "Client ID" must be automatically labeled as 'Confidential - Client'. This label must encrypt the document and apply a 'Contoso Confidential' watermark. 2. **Financial Reports:** Excel workbooks containing more than 10 credit card numbers must be automatically labeled as 'Highly Confidential - Finance'. This label must encrypt the document and restrict access to members of the 'Finance_Team' security group. 3. **User Experience:** When a label is automatically applied, users should be notified via a policy tip in Office apps. Users must not be allowed to downgrade the classification from 'Highly Confidential - Finance' to 'Confidential - Client' without providing a business justification. 4. **Deployment:** The CCO wants to test the accuracy of the auto-labeling logic for one month before any labels are actually applied to documents. Which single Microsoft Purview configuration should the administrator create to meet all these requirements?

Question 9Choose one

A global logistics company, Fabrikam Shipping, is using Exact Data Match (EDM) to protect a database of over 1 million customer tracking numbers. The database is updated twice daily. The compliance team has identified a need to add a new 'Carrier Code' column to the EDM schema. The goal is to update the EDM schema and data with zero downtime for the DLP policies that rely on it. What is the correct sequence of actions?

Question 10Choose one

A financial consulting firm needs to automatically apply a 'Confidential - Finance' sensitivity label to documents in a specific SharePoint Online site named 'Quarterly Audits'. This label must be applied at the service level to all new and modified documents containing credit card numbers. In contrast, for user endpoints, the firm wants to recommend this same label to users when they work on documents with credit card numbers in Word or Excel, but allow them to accept or dismiss the recommendation. Which combination of policies achieves this?

10 more free samples are waiting

Create a free account to unlock the whole SC-400 sample bank, or get full access to all 172 practice questions in the simulator.

Create account