Microsoft · SC-401
DLP policies
SC-401 · Lesson 6 of 13 · 35:43
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-401 exam (Microsoft Certified: Information Security Administrator Associate). In this lesson: designing a data loss prevention policy (locations, conditions, actions, policy tips, roles), simulation mode, rule and policy precedence (the most restrictive action), Adaptive Protection's insider risk levels in DLP rules, and Defender for Cloud Apps file policies. Includes three original practice questions.
Preview the topics
- Before blocking external sharing of contracts, a team wants to see how often a new policy would trigger, without affecting users. What should they use?
- A file matches two rules: one only audits, and the other blocks external sharing. What happens?
- Block uploads of customer data only for users at an elevated insider risk level, and just warn everyone else. What should the rule use?