Score Higher on Verified SC-401 | Administering Information Security in Microsoft 365 Exam Questions with Answers

The goal is to automatically label documents in Site1 that contain credit card numbers. To achieve this, we need a sensitivity label with an auto-labeling policy based on a sensitive info type that detects credit card numbers.

Step 1: Create a Sensitive Info Type

? A sensitive info type is needed to detect credit card numbers in documents.

? Microsoft Purview includes built-in sensitive info types for credit card numbers, but we can also create a custom one if necessary.

Step 2: Create a Sensitivity Label

? A sensitivity label is required to classify and protect documents containing sensitive information.

? This label can apply encryption, watermarking, or access controls to credit card data.

Step 3: Create an Auto-Labeling Policy

? An auto-labeling policy ensures that the sensitivity label is applied automatically when credit card numbers are detected in Site1.

? This policy is configured to scan files and automatically apply the correct sensitivity label.

Understanding Site4's Retention Policies:

? Site4RetentionPolicy1 deletes items older than 2 years from creation. If a file was created on January 1, 2021, it would be deleted after January 1, 2023.

? Site4RetentionPolicy2 retains files for 4 years from creation. If a file was created on January 1, 2021, it will be kept until January 1, 2025, but not deleted after that (policy states "Do nothing").

Statement 1 - Yes, because Site4RetentionPolicy2 ensures files are retained for 4 years.

Statement 2 - Yes, because Site4RetentionPolicy2 retains the file for 4 years (until January 1, 2025).

Statement 3 - No, because retention is only for 4 years (until January 1, 2025). After that, the policy does "nothing," meaning the file is no longer recoverable after that period.

The requirement states that all Microsoft 365 data for users must be retained for at least one year. In Microsoft 365, retention policies must be configured for each type of data storage.

Step 1: Identifying Where Data is Stored

From the case study, users store data in the following locations:

? SharePoint Online sites

? OneDrive accounts

? Exchange email

? Exchange public folders

? Teams chats

? Teams channel messages

Since these locations fall under two broad categories:

? Microsoft Exchange data (Emails, Public folders)

? SharePoint, OneDrive, and Teams data

Step 2: Required Retention Policies

1?. A single retention policy can cover:

? SharePoint Online

? OneDrive

? Microsoft Teams

2. A second retention policy is required for:

? Exchange (Emails & Public Folders)

Thus, the minimum number of retention policies required to meet the requirement is 2.

Microsoft 365 retention policies can be applied broadly across multiple services with just two policies:

? One for Exchange & Public Folders

? One for SharePoint, OneDrive, and Teams

There's no need for separate policies for each individual workload unless different retention durations are required, which is not stated in the requirement.