Exam SC-401 topic 3 question 21 discussion

Actual exam question from Microsoft's SC-401

Question #: 21
Topic #: 3

HOTSPOT -
You have a Microsoft 365 E5 subscription that uses Microsoft Purview and just-in-time (JIT) protection. The subscription contains the users shown in the following table.

The subscription contains the devices shown in the following table.

The devices contain the files shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by SH_Train at June 5, 2025, 4:34 a.m.

Comments

Submit Cancel

SH_Train

Highly Voted 1 month, 4 weeks ago

User1 is in scope for JIT and the device is onboarded. The file is not evaluated thus will be blocked until evaluation is complete. Answer should be Yes.

upvoted 7 times

...

Jdr379

Most Recent 1 month ago

I believe it should be Yes No No Reasoning: Statement 1 Breakdown: User1: In JIT scope ✅ Device1: Onboarded ✅ File1.docx: "Not evaluated" - this is the KEY trigger for JIT protection ✅ Action: Copy to USB (egress activity) ✅ How JIT Should Work: User1 attempts to copy File1.docx to USB JIT sees the file is "not evaluated" JIT immediately blocks the egress activity Classification/evaluation begins in the background Once evaluation completes, appropriate DLP policy actions apply JIT protection is specifically designed to block BEFORE evaluation completes, regardless of what the final policy determination will be.

upvoted 1 times

...