Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 2 question 31 discussion

Actual exam question from Microsoft's SC-400

Question #: 31
Topic #: 2

Your company has a Microsoft 365 tenant.
The company performs annual employee assessments. The assessment results are recorded in a document named AssessmentTemplate.docx that is created by using a Microsoft Word template. Copies of the employee assessments are sent to employees and their managers. The assessment copies are stored in mailboxes, Microsoft SharePoint Online sites, and OneDrive for Business folders. A copy of each assessment is also stored in a SharePoint Online folder named
Assessments.
You need to create a data loss prevention (DLP) policy that prevents the employee assessments from being emailed to external users. You will use a document fingerprint to identify the assessment documents. The solution must minimize effort.
What should you include in the solution?

A. Create a fingerprint of 100 sample documents in the Assessments folder.
B. Create a sensitive info type that uses Exact Data Match (EDM).
C. Import 100 sample documents from the Assessments folder to a seed folder.
D. Create a fingerprint of AssessmentTemplate.docx.

Show Suggested Answer

Suggested Answer: D 🗳️

by bingomutant at Dec. 9, 2021, 2:35 p.m.

Comments

Submit Cancel

sergioandreslq

Highly Voted 2 years, 6 months ago

I going with D, It is just created document fingerprint using the template, this will be used as "Sensitive Info Type" to discover any employee assessment and apply the control over this file as required.

upvoted 9 times

...

xswe

Highly Voted 1 year, 3 months ago

Since we want to go for the solution with the most minimized effort we should create a fingerprint of the AssessmentTemplate, when they are getting filled by the users we can still detect them thanks to the fingerprint of the docx file we have created.

upvoted 5 times

...

yoshizutakahiro

Most Recent 1 year ago

Selected Answer: D

Dが正解です。

upvoted 2 times

...

nicekoda

1 year, 6 months ago

D is wrong. Neither mail flow rules nor Document Fingerprinting supports the .dotx file type, even if this is a common file type for Word documents. https://learn.microsoft.com/en-us/training/modules/create-manage-sensitive-information-types/5-implement-document-fingerprint

upvoted 2 times

nicekoda

1 year, 6 months ago

pls disregard. Confused dotx with docx

upvoted 2 times

...

chrissempai

1 year, 10 months ago

Selected Answer: D

Was on exam the 9/9/22

upvoted 1 times

...

music_man

1 year, 10 months ago

Selected Answer: D

For document fingerprinting all we need is single template document to create a fingerprint using New-DlpFingerprint command. Then an SIT is created from the fingerprint.

upvoted 1 times

...

Azuz

2 years, 4 months ago

Selected Answer: D

Because the question states "The solution must minimize effort."

upvoted 1 times

...

Pravda

2 years, 5 months ago

On exam 1/20/2022

upvoted 1 times

...

Pravda

2 years, 5 months ago

Answer D Key in the question are Word Template. For a template document you would create a fingerprint of the template. For a template I would think it would be .dotx and not a docx. But then that would give the answer away.

upvoted 3 times

...

Sam12

2 years, 6 months ago

A and E are missleading, seeds are used for trainable classifiers which is not the case for this question. Fingerprinting uses file in your local drive and you do it via powershell: $Employee_Template = Get-Content "C:\My Documents\Contoso Employee Template.docx" -Encoding byte -ReadCount 0 $Employee_Fingerprint = New-DlpFingerprint -FileData $Employee_Template -Description "Contoso Employee Template"

upvoted 1 times

...