Exam SC-400 topic 2 question 25 discussion

Actual exam question from Microsoft's SC-400

Question #: 25
Topic #: 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring a file policy in Microsoft Cloud App Security.
You need to configure the policy to apply to all files. Alerts must be sent to every file owner who is affected by the policy. The policy must scan for credit card numbers, and alerts must be sent to the Microsoft Teams site of the affected department.
Solution: You use the Data Classification service inspection method and send alerts as email.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Alerts must be sent to the Microsoft Teams site of the affected department. A Microsoft Power Automate playbook should be used.
Reference:
https://docs.microsoft.com/en-us/cloud-app-security/dcs-inspection https://docs.microsoft.com/en-us/cloud-app-security/flow-integration

by klosedotorg83 at Oct. 11, 2021, 5:38 a.m.

Comments

Submit Cancel

Topaz007

Highly Voted 2 years, 10 months ago

Answer is NO. For sure MCAS can send out alerts but only to preset e-mail address. BUT... The question states '...alerts must be sent to the Microsoft Teams site of the affected department...'. As such the alerts are sent to different e-mail addresses. In configs like this it's better to use Power Automate.

upvoted 7 times

...

ChaBum

Highly Voted 2 years, 6 months ago

Answer should be YES, the alert email can be sent to the email associated to the Microsoft Teams site. https://support.microsoft.com/en-us/office/send-an-email-to-a-channel-in-teams-d91db004-d9d7-4a47-82e6-fb1b16dfd51e

upvoted 6 times

...

mbhasker

Most Recent 8 months, 2 weeks ago

Ans: YES

upvoted 1 times

...

NinjaSchoolProfessor

1 year, 7 months ago

Answer = [A]. During the creation of a policy within Defender for Cloud apps, the Data Classification Services integration capability allows you to select the [Inspection method] and choose either [Built-in DLP] or select the [Data Classification Services]. If choosing the latter, you will then be given the choice to select a Purview SIT, EDM, Fingerprint, or Trainable Classifier. The next section below that allows you to send alerts via Email. While the answer in the example is vague, it's still correct.

upvoted 2 times

...

Pravda

2 years, 6 months ago

On exam 1/20/2022

upvoted 1 times

...

klosedotorg83

2 years, 10 months ago

It seems to be Correct. Microsoft Data Classification Services integration: Leveraging file policies, you can also set alerts and governance actions for the policy. For more information, see file policies and governance actions. Leveraging session policies, you can also monitor and control actions in real-time when a file matches a DCS type. For more information, see session policy. https://docs.microsoft.com/en-us/cloud-app-security/dcs-inspection File governance actions: Alerts – Alerts can be triggered in the system and propagated via email and text message, based on severity level. https://docs.microsoft.com/en-us/cloud-app-security/governance-actions

upvoted 3 times

...