Exam SC-400 topic 2 question 83 discussion

Actual exam question from Microsoft's SC-400

Question #: 83
Topic #: 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You recently discovered that the developers at your company emailed Azure Storage keys in plain text to third parties.

You need to ensure that when Azure Storage keys are emailed, the emails are encrypted.

Solution: You create a data loss prevention (DLP) policy that has Exchange email, SharePoint sites, OneDrive accounts, and Teams chat and channel messages selected.

Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by Jideakin at March 16, 2025, 12:12 p.m.

Comments

Submit Cancel

ca7859c

3 days, 9 hours ago

Selected Answer: B

https://learn.microsoft.com/en-us/purview/dlp-policy-reference Encryption only available in DLP rule actions Actions Any item that makes it through the conditions filter will have any actions that are defined in the rule applied to it. You'll have to configure the required options to support the action. For example, if you select Exchange with the Restrict access or encrypt the content in Microsoft 365 locations action, you need to choose from these options: Block users from accessing shared SharePoint, OneDrive, and Teams content Block everyone. Only the content owner, last modifier, and site admin will continue to have access Block only people from outside your organization. Users inside your organization will continue to have access. Encrypt email messages (applies only to content in Exchange)

upvoted 1 times

...

Jideakin

1 month, 2 weeks ago

Selected Answer: B

Answer is No. Once you select those other locations (Sharepoint Onedrive and Teams) The option to encrypt in the Rule action will be unavailable.

upvoted 3 times

JambonBlanc

4 days, 20 hours ago

I agree the answer is NO. The solution does not meet the goal. While the DLP policy covers multiple locations, including Exchange email, it does not specifically enforce encryption for emails containing Azure Storage keys. To meet the goal, you would need to configure the DLP policy to detect Azure Storage keys as sensitive information and apply an action that ensures encryption, such as using Microsoft Purview Message Encryption.

upvoted 1 times

...

Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 2 question 83 discussion

Comments

ca7859c

Jideakin

JambonBlanc

SY0-701