Exam SC-200 topic 5 question 1 discussion

D is correct

Correct answer D. The question is outdated because this feature is no longer required."Seamless Endpoint DLP onboarding for Microsoft Defender for Endpoint customers" and "On March 29, 2021, the current integration between Microsoft Defender for Endpoint and AIP will be deprecated." ref: https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/protecting-sensitive-information-on-devices/ba-p/2143555 The answer is still valid since the question is outdated: "The integration is controlled by an on/off toggle in the Microsoft Defender Security Center under Settings -> Advanced features:"

The Azure Information Protection Scanner is used to discover, classify, label, and protect documents stored on-premises on file shares and on SharePoint document libraries. It scans files to identify sensitive information and applies labels according to the policies you've set.

checked it with ChatGPT and they said its B not D I thought its D at the begining but the reasons its B is because onfiguring the scanner clusters in AIP is a more targeted and appropriate first step compared to the other options provided.

Correct option

The first thing to configure to meet the Azure Information Protection requirements is to ensure that all files that have security labels and are stored on the Windows 10 computers are available from the Azure Information Protection "Data discovery dashboard." Therefore, the correct option to configure first is B. scanner clusters in Azure Information Protection from the Azure portal. By configuring scanner clusters, the Azure Information Protection service can discover, classify, and protect sensitive information stored on-premises or in the cloud.

D is correct

questions related to this sim: 5.1-5.3, 6.1, 9.1- 9.6

Guess this question is not up to date anymore, because the integration asked if the answer was D is deprecated: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/threat-protection-integration?view=o365-worldwide#azure-information-protection

Turn on the Azure Information Protection integration so that when a file that contains sensitive information is discovered by Defender for Endpoint though labels or information types, it is automatically forwarded to Azure Information Protection from the device. https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/information-protection-in-windows-overview?view=o365-worldwide#data-discovery-and-data-classification

D is correct. As stated by the requirements below, this is on a Windows 10 endpoint, which would require Defender, not Azure Portal. Azure Information Protection Requirements All files that have security labels and are stored on the Windows 10 computers must be available from the Azure Information Protection ג€" Data discovery dashboard.

yes correct scanner cluster

Correct answer is B: create a scanner cluster https://docs.microsoft.com/en-us/azure/information-protection/deploy-aip-scanner-configure-install?tabs=azure-portal-only#create-a-scanner-cluster