Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 2 question 52 discussion

Actual exam question from Microsoft's SC-400

Question #: 52
Topic #: 2

HOTSPOT
-

You have a Microsoft 365 E5 subscription.

You receive the data loss prevention (DLP) alert shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by CharlieGolf at March 21, 2023, 12:08 p.m.

Comments

Submit Cancel

GeoffLule

Highly Voted 2 years, 3 months ago

I believe this email was delivered immediately. The sender overode rule 1 by providing justification that it was a manager approved transaction. The manager was not involved here.

upvoted 23 times

Boeroe

10 months, 3 weeks ago

Agree, the User overrode the policy using a justification text. The manager had no involvement in this proces

upvoted 5 times

...

cris_exam

Highly Voted 2 years, 1 month ago

I have spent a bit too much time on this one, lol. After more then 30 min of reading and digging, I agree with what other said here that the User overruled with the mentioned text: "Manager approved" and the email was sent immediately, also because there is no block mentioned in the Actions Taken category and just generate alert. 1. delivered immediately 2. overrode rule one

upvoted 6 times

Futfuyfyjfj

1 year, 6 months ago

2-> not correct it’s just plain text filled by the user himself, manager was not involved in the override action from a technical perspective.

upvoted 2 times

...

Domza

Most Recent 1 year, 7 months ago

Why would you send email it for approval, if or generate an alert and override Rule?

upvoted 1 times

...

xswe

2 years, 4 months ago

Sent to manager for approval, since "Manager approved" Overrode Rule1 since "User overrode policy = Yes"

upvoted 3 times

217f3c9

2 years, 2 months ago

Its only the text the user put in while overriding the policy.

upvoted 4 times

Futfuyfyjfj

1 year, 6 months ago

Exactly!

upvoted 1 times

...

CharlieGolf

2 years, 4 months ago

I don't think the second part is correct. The user's manager was not involved in the override process. User override was allowed and the text was simply selected from the admin-configured toaster options. It did not go through a workflow to the manager. https://microsoft.github.io/ComplianceCxE/enduser/dlpenduser/

upvoted 4 times

EM1234

1 year, 2 months ago

I agree with this logic. The user overided and then chose "Manager Approved.. etc". The user was the only one who did anything here and the email was sent immediately

upvoted 1 times

...

bsongwk

2 years, 4 months ago

If manager is not involved since user override is allowed, the email would have be delivered immediately? If so, the answer to first part is wrong as well. It should be "delivered immediately".

upvoted 5 times

pokus00132

2 years, 4 months ago

I agree that the first part is also wrong, it should be "delivered immediately"

upvoted 4 times

...