Free SC-401: Administering Information Security in Microsoft 365 Exam Questions and Answers
47 verified practice questions for SC-401.
The first 10 questions on this page are free to read, answers included — no account and no card. A plan opens the rest of the bank, the full timed practice test and your weak-topic reporting.
Last updated: September 19, 2026
- Exam code
- SC-401
- Provider
- Microsoft
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Our test mode duration & pass mark
- 130 mins · 70%
- Verified answers
- Reviewed weekly
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
How many files in Site2 can User1 and User2 access after you turn on DLPpolicy1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Match each item to its target.
Please select an optionIncorrectCorrect answer: Number of files that User1 can access = 2; Number of files that User2 can access = 1
Understanding DLP Policy Impact on File Access The DLP policy (DLPpolicy1) applies to Site2 and restricts access when: Content contains SWIFT Codes. Instance count is 2 or more. File Analysis (Based on SWIFT Codes Count) Files that remain accessible (not restricted by DLP): File1.docx (Contains only 1 SWIFT Code Below restriction threshold) User access after DLP policy is applied: User1 (Site Owner): Has higher privileges and can override DLP restrictions (through admin intervention). Can access 2 files (File1.docx + override access to another file). User2 (Site Visitor): Has read-only access but DLP blocks access to restricted files. Can only access 1 file (File1.docx), since all others are restricted.
Question #2
You have a Microsoft 365 E5 subscription. The subscription contains 500 devices that are onboarded to Microsoft Purview. You select Activate Microsoft Purview Audit. You need to ensure that you can track interactions between users and generative AI websites. What should you deploy to the devices?
Please select an optionIncorrectCorrect answer: A
To track interactions between users and generative AI websites in Microsoft Purview Audit, you need to deploy the Microsoft Purview browser extension to the devices. This extension enables tracking of user activities on web-based applications, including AI-related tools like ChatGPT, Microsoft Copilot, and other generative AI platforms. Microsoft Purview extension provides visibility into browser-based activities, including AI tool usage, ensuring compliance and risk management within Microsoft Purview. This extension works with Microsoft Edge and Google Chrome to track and log user interactions.
Was this answer correct?Question #3
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps. You plan to deploy a Defender for Cloud Apps file policy that will be triggered when the following conditions are met: A file is shared externally. A file is labeled as internal only. Which filter should you use for each condition? To answer, drag the appropriate filters to the correct conditions. Each filter may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
Match each item to its target.
Please select an optionIncorrectCorrect answer: When a file is shared externally = Access level; When a file is labelled as Internal only = Sensitivity label
Question #4
You have a Microsoft 365 subscription. You need to customize encrypted email for the subscription. The solution must meet the following requirements. Ensure that when an encrypted email is sent, the email includes the company logo. Minimize administrative effort. Which PowerShell cmdlet should you run?
Please select an optionIncorrectCorrect answer: B
To customize encrypted email in Microsoft 365, including adding a company logo, you need to modify the Office Message Encryption (OME) branding settings. The Set-OMEConfiguration PowerShell cmdlet allows you to configure branding elements such as: Company logo Custom text Background color This cmdlet is used to update existing OME branding settings, ensuring that encrypted emails sent from your organization include the required customizations.
Was this answer correct?Question #5
You have a Microsoft 365 E5 subscription that contains a retention policy named RP1 as shown in the following table. You place a preservation lock on RP1. You need to modify RP1. Which two modifications can you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Select 2 answers.
Please select an optionIncorrectCorrect answer: A, F
A Preservation Lock in Microsoft Purview Retention Policies enforces strict compliance and prevents certain modifications to ensure data is retained according to compliance requirements. When a Preservation Lock is applied: * 1. You cannot disable or delete the policy. * 2. You cannot remove locations from the policy. * 3. You cannot decrease the retention period. * 4. You can add locations to the policy. * 5. You can increase the retention period. You can expand the retention policy to cover additional locations (e.g., more Exchange mailboxes, SharePoint sites). You can extend the retention duration (e.g., increase from 5 years to 10 years) since this aligns with stricter compliance.
Was this answer correct?Question #6
You have a Microsoft 365 E5 subscription. You need to create a sensitivity label named Label1. The solution must ensure that users can use Microsoft 365 Copilot to summarize files that have Label1 applied. Which permission should you select for Label1?
Please select an optionIncorrectCorrect answer: B
To allow Microsoft 365 Copilot to summarize files that have Label1 applied, the label must grant permission to extract content from the document. The correct permission for this is Copy and extract content (EXTRACT). Microsoft 365 Copilot requires access to read and process content in documents to generate summaries. The EXTRACT permission allows users (and AI tools like Copilot) to copy and extract content for processing while still maintaining the protection applied by the sensitivity label.
Was this answer correct?Question #7
You have a Microsoft SharePoint Online site that contains the following files. Users are assigned roles for the site as shown in the following table. Which files can User1 and User2 open? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Match each item to its target.
Please select an optionIncorrectCorrect answer: User1 = File1.docx, File2.docx, and File3.docx; User2 = File1.docx and File2.docx only
Question #8
You have a Microsoft 365 E5 subscription that contains a trainable classifier named Trainable1. You plan to create the items shown in the following table. Which items can use Trainable 1?
Please select an optionIncorrectCorrect answer: D
A trainable classifier in Microsoft Purview is used to automatically identify and classify unstructured data based on content patterns. The classifier can be used in: * 1. Retention Labels (Label2) Supported Trainable classifiers can be linked to retention labels to automatically classify and apply retention policies to documents. * 2. Retention Label Policies (Policy1) Supported Retention label policies define how and where retention labels are applied, including automatically using trainable classifiers. * 3. Data Loss Prevention (DLP) Policies (DLP1) Supported Trainable classifiers can be used in DLP policies to detect and protect sensitive content automatically.
Was this answer correct?Question #9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You recently discovered that the developers at your company emailed Azure Storage Account keys in plain text to third parties. You need to ensure that when Azure Storage Account keys are emailed, the emails are encrypted. Solution: You create a data loss prevention (DLP) policy that has only the Exchange email location selected. Does this meet the goal?
Please select an optionIncorrectCorrect answer: A
To ensure Azure Storage Account keys are encrypted when sent via email, you need a Data Loss Prevention (DLP) policy that detects Azure Storage Account keys using a sensitive information type and automatically encrypts emails containing these keys. A DLP policy with Exchange email as the only location meets this requirement because it identifies sensitive data in email messages and it applies protection actions, such as encryption, blocking, or alerts.
Was this answer correct?Question #10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You recently discovered that the developers at your company emailed Azure Storage Account keys in plain text to third parties. You need to ensure that when Azure Storage Account keys are emailed, the emails are encrypted. Solution: You configure a mail flow rule that matches the text patterns. Does this meet the goal?
Please select an optionIncorrectCorrect answer: B
To ensure Azure Storage Account keys are encrypted when sent via email, you need a Data Loss Prevention (DLP) policy that detects Azure Storage Account keys using a sensitive information type and automatically encrypts emails containing these keys. Text patterns in mail flow rules are not as reliable as sensitive information types in DLP. Mail flow rules lack advanced content detection and machine learning-based classification, making them less effective than DLP.
Was this answer correct?
Continue with SC-401: Administering Information Security in Microsoft 365
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SC-401: Administering Information Security in Microsoft 365, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Other Microsoft certifications
- AZ-500: Microsoft Azure Security Technologies (opens in a new tab)
- MS-101: Microsoft 365 Mobility and Security (opens in a new tab)
- MS-102: Microsoft 365 Administrator (beta) (opens in a new tab)
- MS-100: Microsoft 365 Identity and Services (opens in a new tab)
- PL-900: Microsoft Power Platform Fundamentals (opens in a new tab)
- AZ-305: Designing Microsoft Azure Infrastructure Solutions (opens in a new tab)
Reviews
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah Smith
USA
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar Nyström
Sweden
★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit Sharma
India
FAQ
Learn More: https://learn.microsoft.com/en-us/credentials/
- Q1: What are Microsoft Certification Exams?
- A: Microsoft Certification Exams validate your expertise in using and managing Microsoft’s technologies and solutions, including Azure, Office 365, Windows, and more. These certifications demonstrate your proficiency in deploying, configuring, and optimizing Microsoft products to support business operations and IT infrastructure.
- Q2: Why should I pursue Microsoft Certification?
- A: Microsoft Certification enhances your professional credibility, showcasing your skills and knowledge in Microsoft technologies. This can lead to better job opportunities, higher salaries, and career advancement in IT, cloud computing, software development, and related fields.
- Q3: What are the benefits of Microsoft Certification?
- A: Benefits include recognition as a certified Microsoft professional, improved job performance, access to exclusive resources, continuing education opportunities, and staying current with the latest Microsoft technologies and best practices.
- Q4: Who should take Microsoft Certification Exams?
- A: IT professionals, system administrators, developers, cloud engineers, data analysts, and anyone involved in managing and implementing Microsoft solutions should consider these certifications to validate their expertise and advance their careers.
- Q5: What types of Microsoft Certification Exams are available?
- A: Microsoft offers various certification paths, including:
- Q6: How do I prepare for Microsoft Certification Exams?
- A: Preparation can include official Microsoft training courses, study guides, practice exams, online tutorials, and hands-on experience with Microsoft products and solutions.
- Q7: Where can I take Microsoft Certification Exams?
- A: Microsoft Certification Exams can be taken online with remote proctoring or at authorized Pearson VUE testing centers worldwide, providing flexibility to fit your schedule and location.
- Q8: How do Microsoft Certifications impact my career?
- A: Microsoft Certifications significantly boost your career by demonstrating your expertise to employers, making you a more competitive candidate for advanced roles and promotions in IT, cloud computing, software development, and other tech-related fields.
- Q9: Are there any prerequisites for Microsoft Certification Exams?
- A: Some exams may have prerequisites, such as foundational knowledge or prior experience with Microsoft products. Check the specific requirements for each certification path on the Microsoft Learn website.
- Q10: How often do I need to recertify for Microsoft Certifications?
- A: Microsoft Certifications typically require renewal every year or two, depending on the certification, to ensure that certified professionals stay updated with the latest technologies and industry practices.