Quickly grab our SC-401 product now and kickstart your exam preparation today!
| Name: | Administering Information Security in Microsoft 365 |
| Exam Code: | SC-401 |
| Certification: | Microsoft 365 Certified |
| Vendor: | Microsoft |
| Total Questions: | 225 |
| Last Updated: | Oct 25, 2026 |
You need to provide a user with the ability to view data loss prevention (DIP) alerts in the Microsoft Purview portal. The solution must use the principle of least privilege. Which role should you assign to the user?
You have a Microsoft 365 alert named Alert2 as shown in the following exhibit.

You need to manage the status of Alert? To which status can you change Alette?
You have a Microsoft J65 ES subscription. You need to create a Microsoft Defender for Cloud Apps policy that will detect data loss prevention (DIP) violations. What should you create?
You have a Microsoft 365 subscription that contains two Microsoft SharePoint Online sites named
Site1 and Site2. You plan to use policies to meet the following requirements:
Add a watermark of Confidential to a document if the document contains the words Project1 or
Project2.
Retain a document for seven years if the document contains credit card information.
Add a watermark of Internal Use Only to all the documents stored on Site2.
Add a watermark of Confidential to all the documents stored on Site1.
You need to recommend the minimum number of sensitive info types required.
How many sensitive info types should you recommend?
You need to create a retention policy to delete content after seven years from the following
locations:
Exchange Online email
SharePoint Online sites
OneDrive accounts
Microsoft 365 Groups
Teams channel messages
Teams chats
What is the minimum number of retention policies that you should create?