ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-400 All Questions

View all questions & answers for the SC-400 exam
Go to Exam

Exam SC-400 topic 2 question 7 discussion

Actual exam question from Microsoft's SC-400
Question #: 7
Topic #: 2
[All SC-400 Questions]

HOTSPOT -
You have a data loss prevention (DLP) policy that has the advanced DLP rules shown in the following table.

You need to identify which rules will apply when content matches multiple advanced DLP rules.
Which rules should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide
by JakubK64 at July 2, 2021, 1:23 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
JakubK64
Highly Voted 3 years, 10 months ago
Looks correct. DLP rules take effect in order of priority and beeing most restrictive. In first case rule 2 is most restrictive, in second case rule 2 is as restrictive as 4, but have lower priority number
upvoted 17 times
sergioandreslq
3 years, 4 months ago
DLP priority When you have more than one DLP policy, it is important to prioritize policies with more restrictions above than less restrictive actions To confiture DLP for policy precedence it is important that each one of those policies will have a numerical value which means the lower the value is, the higher priority. 1. The rules of DLP policy with the lowest order/priority number are processed first. 2. You need to set the priority number as “0” to set the highest priority
upvoted 3 times
sergioandreslq
3 years, 4 months ago
When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the first rule evaluated that has the most restrictive action is enforced. For example, if content matches all of the following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule: Rule 1: only notifies users Rule 2: notifies users, restricts access, and allows user overrides Rule 3: notifies users, restricts access, and does not allow user overrides Rule 4: restricts access Rules 1, 2, and 4 would be evaluated, but not applied. In this example, matches for all of the rules are recorded in the audit logs and shown in the DLP reports, even though only the most restrictive rule is applied. Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-policy-reference?view=o365-worldwide#hosted-service-workloads
upvoted 2 times
...
...
...
McAlec
Highly Voted 3 years, 6 months ago
Correct, but right reference is https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-policy-reference?view=o365-worldwide
upvoted 5 times
...
husamshahin
Most Recent 9 months, 1 week ago
on Exam 28-7-2024
upvoted 1 times
...
xswe
2 years ago
When you have several DLP policies that applied when all of them matches the rules the most restrictive DLP policy with the highest priority will get applied, pretty understandeble. Rule2 will take place since it has the higher restrictions out of all of them - User Overrides ON is less restrictive than having it OFF. Rule2, both Rule2 and Rule4 have the same restrictivness so we have to look at the priority level here which means Rule2 gets applied.
upvoted 3 times
...
Pravda
3 years, 3 months ago
On exam 1/20/2022
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago