Microsoft SC-400 Practice Test

SC-400 practice test: what's covered

• Microsoft Purview
• DLP
• Data Lifecycle
• Sensitivity Labels

Free SC-400 sample questions

1. Tailspin Toys wants to use trainable classifiers to identify source code version 1 in Microsoft 365. You need to create a custom trainable classifier. What are two prerequisites for creating and training a custom classifier? (Select two) [Question ID: IP-001]

   • A. At least 50 positive samples of the content.
   • B. A dedicated SharePoint site to store the seed content.
   • C. At least 500 negative samples of the content for phase 1.
   • D. At least 10,000 files in the tenant for background scanning validation 1.
   Show answer

   Correct: A and B. To create a custom trainable classifier, you need seed content. The minimum requirement for seed content is at least 50 positive samples that strongly represent the category you want to classify. Additionally, these samples must be stored in a dedicated SharePoint Online folder/site where the classifier can access them for the initial training phase. Negative samples are used later in the review phase, not the initial creation, and while an E5 license is required to use them, the technical prerequisites for the creation process are the samples and the storage location.

2. Fabrikam Inc. needs to automatically apply a sensitivity label to documents containing credit card numbers in SharePoint Online and OneDrive (Dataset 2). The label must apply encryption and restrict access to full-time employees only. What should you configure first before creating the auto-labeling policy? [Question ID: IP-002]

   • A. Create a sensitivity label and configure encryption settings.
   • B. Create a Data Loss Prevention (DLP) policy for SharePoint instance 2.
   • C. Create a retention label and publish it to SharePoint instance 2.
   • D. Enable Information Rights Management (IRM) in SharePoint Admin Center for site 2.
   Show answer

   Correct: A. Before you can create an auto-labeling policy to apply a sensitivity label, the sensitivity label itself must exist and be configured with the necessary protection actions, such as encryption and access restrictions. The auto-labeling policy merely dictates the conditions under which this pre-existing label is applied. The other options are incorrect because DLP policies prevent sharing, retention labels manage lifecycle, and IRM is a legacy feature, whereas modern sensitivity labels handle these requirements natively.

3. You are a compliance administrator for Trey Research. You need to ensure that any email sent to external domains containing the word 'Project Obsidian 3' is automatically encrypted. Which feature should you use? [Question ID: IP-003]

   • A. An Exchange mail flow rule (transport rule) or an auto-labeling policy with encryption.
   • B. A Data Loss Prevention (DLP) policy with a block action targeting external users 3.
   • C. A retention policy applied to Exchange mailboxes for project 3.
   • D. An eDiscovery (Premium) hold on all Exchange mailboxes for legal case 3.
   Show answer

   Correct: A. To automatically apply encryption to emails based on content (like specific words) sent externally, you can use either an Exchange mail flow rule configured with OME (Office 365 Message Encryption) or a sensitivity label auto-labeling policy. DLP policies are primarily for preventing sharing, retention policies are for keeping data, and eDiscovery holds are for legal preservation, none of which natively encrypt outbound emails for secure delivery.

4. Trey Research wants to use trainable classifiers to identify source code version 4 in Microsoft 365. You need to create a custom trainable classifier. What are two prerequisites for creating and training a custom classifier? (Select two) [Question ID: IP-004]

   • A. At least 50 positive samples of the content.
   • B. A dedicated SharePoint site to store the seed content.
   • C. At least 500 negative samples of the content for phase 4.
   • D. At least 10,000 files in the tenant for background scanning validation 4.
   Show answer

   Correct: A and B. To create a custom trainable classifier, you need seed content. The minimum requirement for seed content is at least 50 positive samples that strongly represent the category you want to classify. Additionally, these samples must be stored in a dedicated SharePoint Online folder/site where the classifier can access them for the initial training phase. Negative samples are used later in the review phase, not the initial creation, and while an E5 license is required to use them, the technical prerequisites for the creation process are the samples and the storage location.

5. Trey Research needs to automatically apply a sensitivity label to documents containing credit card numbers in SharePoint Online and OneDrive (Dataset 5). The label must apply encryption and restrict access to full-time employees only. What should you configure first before creating the auto-labeling policy? [Question ID: IP-005]

   • A. Create a sensitivity label and configure encryption settings.
   • B. Create a Data Loss Prevention (DLP) policy for SharePoint instance 5.
   • C. Create a retention label and publish it to SharePoint instance 5.
   • D. Enable Information Rights Management (IRM) in SharePoint Admin Center for site 5.
   Show answer

   Correct: A. Before you can create an auto-labeling policy to apply a sensitivity label, the sensitivity label itself must exist and be configured with the necessary protection actions, such as encryption and access restrictions. The auto-labeling policy merely dictates the conditions under which this pre-existing label is applied. The other options are incorrect because DLP policies prevent sharing, retention labels manage lifecycle, and IRM is a legacy feature, whereas modern sensitivity labels handle these requirements natively.

Last updated: 2026-10-19

SC-400 practice test FAQ

Related practice tests

• Microsoft SC-401 practice test
• Microsoft Purview DLP practice test
• Microsoft SC-900 practice test
• Microsoft SC-300 practice test
• Microsoft MD-102 practice test
• Microsoft SC-200 practice test