Exam SC-400 topic 2 question 74 discussion

Actual exam question from Microsoft's SC-400

Question #: 74
Topic #: 2

You have a Microsoft 365 tenant.

You have a database that stores customer details. Each customer has a unique 13-digit identifier that consists of a fixed pattern of numbers and letters.

You need to implement a data loss prevention (DLP) solution that meets the following requirements:

• Email messages that contain a single customer identifier can be sent outside your company.
• Email messages that contain two or more customer identifiers must be approved by the company's data privacy team.

Which two components should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. a mail flow rule
B. a retention label
C. a DLP policy
D. a sensitive information type
E. a sensitivity label

Show Suggested Answer

Suggested Answer: CD 🗳️

by Ruslan23 at April 5, 2024, 5:18 a.m.

Comments

Submit Cancel

Dools

7 months, 1 week ago

A is not correct. Should be C. & D. Taken from the MC doco "Exchange data loss prevention (DLP) policies are being deprecated" https://learn.microsoft.com/en-us/purview/dlp-migrate-exo-policy-to-unified-dlp?tabs=purview

upvoted 1 times

Dools

7 months, 1 week ago

MS Doco*

upvoted 1 times

...

belyo

7 months, 1 week ago

Selected Answer: CD

DLP & SIT not sure how can you configure mailflow rule to match this kind of requirement

upvoted 3 times

...

Boeroe

8 months, 3 weeks ago

Selected Answer: CD

Creating a DLP with an SIT you can set the rule to contain an instance count of 2 to any with Action: Forward the message for approval to sender's manager. When there is no or 1 instance count of the SIT the rule won't be hit and the email will continue to be sent

upvoted 3 times

...

Ruslan23

1 year, 2 months ago

Selected Answer: AD

Should be AD since you need to match content with SIT and block email sending with mail flow rules. https://learn.microsoft.com/en-us/exchange/security-and-compliance/data-loss-prevention/integrate-sensitive-information-rules#sensitive-information-rules-within-the-mail-flow-rule-framework

upvoted 3 times

Ruslan23

1 year, 2 months ago

Note that while a DLP policy would typically be part of a solution like this, it is not one of the best answers in this case because the question specifically asks for two components that should be included in the solution, and the use of a DLP policy is implied

upvoted 1 times

...