SC-400 Exam Dumps - Microsoft Information Protection Administrator

To prevent the folder C:\app1\data from being monitored by Endpoint Data Loss Prevention (DLP), follow these steps:

Configure File Path Exclusions:

Open the Microsoft Purview compliance portal.

Navigate to Data loss prevention > Overview > Data loss prevention settings > Endpoint settings.

Look for the File path exclusions section.

Add an exclusion for the path C:\app1\data.

Files within this folder will not be audited or subject to DLP policy enforcement12.

Remember to validate this configuration and ensure that the folder is excluded from DLP monitoring

To allow the U.S. Sales group to store files containing information subject to the General Data Protection Regulation (GDPR) in their OneDrive accounts while keeping other GDPR restrictions intact, follow these steps:

Create a Security Group:

Log in to the Microsoft 365 admin center.

Navigate to Groups and create a new security group called “U.S. Sales”.

Configure OneDrive Sharing Settings:

Go to the Settings > Org settings page.

On the Services tab, select Microsoft 365 on the web.

Choose whether to let users open files stored in third-party storage services in Microsoft 365 on the web. Ensure this setting aligns with your organization’s GDPR requirements1.

Set Specific Sharing Permissions:

Set the default OneDrive share type to “Specific People” under the Sharing menu in the OneDrive admin area.

Right-click the folder in OneDrive online, click Share.

Click the more button (three dots) in the Send Link header.

Click Manage Access.

Click Grant Access, then add the “U.S. Sales” security group. This access will apply only to that group2.

By following these steps, the U.S. Sales group will be able to store GDPR-related files in their OneDrive accounts while maintaining compliance with other GDPR restrictions

To restrict the Confidential - Finance label to only the members of the Finance Team group, follow these steps:

Create a Sensitivity Label:

Log in to the Microsoft Purview portal or the Microsoft Purview compliance portal as an admin.

Navigate to Sensitivity labels and create a new label called “Confidential - Finance”.

Specify the appropriate settings for this label, including encryption, content markings, and permissions1.

Configure Encryption Settings:

When creating the label, ensure that you configure the encryption settings.

Choose either to assign permissions now (where you determine exactly which users get which permissions) or allow users to assign permissions when they apply the label to content2.

Assign the Label to the Finance Team Group:

In the Microsoft Purview portal, go to the Groups section.

Select the Finance Team group.

Under Settings, choose Sensitivity labels.

Add the “Confidential - Finance” label to this group.

Only members of the Finance Team will now have access to this label3.

Test the Configuration:

Verify that only members of the Finance Team can apply the “Confidential - Finance” label to documents, emails, or other content.