Exam SC-400 topic 2 question 71 discussion

Actual exam question from Microsoft's SC-400

Question #: 71
Topic #: 2

DRAG DROP
-

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.

You plan to deploy a Defender for Cloud Apps file policy that will be triggered when the following conditions are met:

• A file is shared externally.
• A file is labeled as internal only.

Which filter should you use for each condition? To answer, drag the appropriate filters to the correct conditions. Each filter may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Tzu_Hsien at Feb. 10, 2024, 3:49 p.m.

Comments

Submit Cancel

Ruslan23

8 months ago

Given answers are correct

upvoted 1 times

...

Tzu_Hsien

10 months, 1 week ago

Correct!!(●'◡'●) From document: *Access level – Sharing access level; public, external, internal, or private. *Sensitivity label - Search for files with specific labels set. Labels are either:

upvoted 2 times

Tzu_Hsien

10 months, 1 week ago

sorry i don't finish, so again: *Sensitivity label - Search for files with specific labels set. Labels are either: 1.Microsoft Purview Information Protection - Requires integration with Microsoft Purview Information Protection. 2.Defender for Cloud Apps - Provides more insight into the files it scans. For each file scanned by Defender for Cloud Apps DLP, you can know if inspection was blocked because the file is encrypted or corrupted. For example, you can set up policies to alert and quarantine password-protected files that are shared externally. 3.Azure RMS encrypted – Files whose content wasn't inspected because they have an Azure RMS encryption set. Password encrypted – Files whose content wasn't inspected because they're password protected by the user. Corrupt file – Files whose content wasn't inspected because their contents couldn't be read.

upvoted 2 times

Tzu_Hsien

10 months, 1 week ago

sorry i don't finish, so again: *Sensitivity label - Search for files with specific labels set. Labels are either: 1.Microsoft Purview Information Protection - Requires integration with Microsoft Purview Information Protection. 2.Defender for Cloud Apps - Provides more insight into the files it scans. For each file scanned by Defender for Cloud Apps DLP, you can know if inspection was blocked because the file is encrypted or corrupted. For example, you can set up policies to alert and quarantine password-protected files that are shared externally. 3.Azure RMS encrypted – Files whose content wasn't inspected because they have an Azure RMS encryption set. 4.Password encrypted – Files whose content wasn't inspected because they're password protected by the user. 5.Corrupt file – Files whose content wasn't inspected because their contents couldn't be read.

upvoted 2 times

...