ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-401 All Questions

View all questions & answers for the SC-401 exam
Go to Exam

Exam SC-401 topic 3 question 4 discussion

Actual exam question from Microsoft's SC-401
Question #: 4
Topic #: 3
[All SC-401 Questions]

DRAG DROP -
You have a Microsoft 365 subscription that contains 20 data loss prevention (DLP) policies.
You need to identify the following:
Rules that are applied without triggering a policy alert
The top 10 files that have matched DLP policies

Alerts that are miscategorized -
Which report should you use for each requirement? To answer, drag the appropriate reports to the correct requirements. Each report may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by SH_Train at June 11, 2025, 11:53 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Koenst
5 days, 4 hours ago
DLP polcy matches DLP polcy matches False positive and override
upvoted 1 times
...
58d4802
2 weeks, 2 days ago
The answer provided is partially correct. The better answer is: DLP policy matches DLP policy matches DLP incident reports
upvoted 1 times
...
SH_Train
2 weeks, 2 days ago
Does anyone know where these particular reports are located? For these requirements i am looking at Activity Explorer and DLP Alerts?
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel