Exam SC-400 topic 1 question 15 discussion

Actual exam question from Microsoft's SC-400

Question #: 15
Topic #: 1

A user reports that she can no longer access a Microsoft Excel file named Northwind Customer Data.xlsx.
From the Cloud App Security portal, you discover the alert shown in the exhibit.

You restore the file from quarantine.
You need to prevent files that match the policy from being quarantined. Files that match the policy must generate an alert.
What should you do?

A. Modify the policy template.
B. Assign the Global reader role to the file owners.
C. Exclude file matching by using a regular expression.
D. Update the governance action.

Show Suggested Answer

Suggested Answer: D 🗳️

by jcgonzalez1978 at Aug. 10, 2021, 2:53 p.m.

Comments

Submit Cancel

jcgonzalez1978

Highly Voted 3 years, 2 months ago

Answer is correct IMHO: A. It's not the answers, since you cannot modify a policy template in MCAS. You can create policies from policies templates B. Assigning that role is not going to prevent files to be quarantined C. We don't want to exclude the file, we want to receive an alert instead of the file being sent to quarantine

upvoted 11 times

...

wooyourdaddy

Highly Voted 2 years, 4 months ago

Selected Answer: D

I wrote the exam today, this question was on it, I choose the answers provided, scored 890!

upvoted 11 times

Vangelis_1980

7 months ago

So it may be wrong since you haven't scored 1000, right?

upvoted 6 times

...

xswe

Most Recent 1 year, 6 months ago

When it comes to the actions that are taking place with a policy in Cloud Apps you want to re-configure the governance action of the policy. If the "Quarintine" options is checked you ahve to uncheck this to avoid sending the file to quarantine.

upvoted 2 times

...

Discuss4certi

3 years, 2 months ago

correct. The wrong governance action is being executed. if you only want an alert you should not enable the quarantine option