Microsoft SC-401 Exam Practice Questions
US$39
Every question with the correct answer and why the other options are wrong.
Card, Apple Pay, Google Pay or PayPal. Download links are on your order page and in your email the moment you pay.
Using Certstash for my SC-401 exam prep was the best decision. The materials were so on point that I passed on my very first try. I highly recommend them to anyone who is serious about getting certified.
Three of the 280 questions in this pack
Question 1
You have a Microsoft 365 E5 subscription that contains a Microsoft Teams channel named Channel1. Channel1 contains research and development documents.
You plan to implement Microsoft 365 Copilot for the subscription.
You need to prevent the contents of files stored in Channel1 from being included in answers generated by Copilot and shown to unauthorized users.
What should you use?
Show answer and explanation
Correct answer: D. sensitivity labels
Microsoft 365 Copilot only summarizes or references content that the requesting user is authorized to access, and it honors the encryption applied by sensitivity labels. Applying a sensitivity label with encryption to the Channel1 files restricts access to the authorized users defined in the label. Copilot checks the usage rights of the user who submits the prompt, and when that user has no rights to the file, the file content is not returned in the response. The protection travels with each file, so it applies wherever Copilot encounters the content.
Why the other options are wrong
- A. A DLP policy cannot be scoped to a single Teams channel and has no condition here that identifies the Channel1 files.
- B. Insider Risk Management detects risky user activity and does not control which content Copilot can return.
- C. Information Barriers restrict communication and collaboration between segments of users rather than protecting the content of specific files.
Question 2
You have a Microsoft 365 E5 subscription.
You need to create a sensitivity label named Label1. The solution must ensure that users can use Microsoft 365 Copilot to summarize files that have Label1 applied.
Which permission should you select for Label1?
Show answer and explanation
Correct answer: B. Copy and extract content (EXTRACT)
When a sensitivity label applies encryption, Microsoft 365 Copilot checks the usage rights of the user before it returns content from the item. Copilot can summarize the content only when the user is granted the EXTRACT usage right, shown in the Microsoft Purview portal as Copy and extract content (EXTRACT), together with VIEW. If a user has VIEW but not EXTRACT, Copilot does not summarize the content and can only reference it with a link. Including Copy and extract content in Label1 therefore allows Copilot to summarize labeled files.
Why the other options are wrong
- A. Export content allows saving the content in other formats and is not the right that Copilot checks before summarizing.
- C. Edit content allows users to modify the document and does not let Copilot extract content for a summary.
- D. View rights alone let Copilot reference the file with a link but not summarize its content.
Question 3
You have a Microsoft 365 E5 subscription.
You need to enable support for sensitivity labels in Microsoft SharePoint Online.
What should you use?
Show answer and explanation
Correct answer: A. the Microsoft Purview portal
Support for sensitivity labels in SharePoint and OneDrive is turned on from the Microsoft Purview portal, on the Sensitivity labels page of Information Protection, or with the Set-SPOTenant cmdlet and the EnableAIPIntegration parameter. Once enabled, SharePoint can process the content of labeled and encrypted Office and PDF files, which allows features such as search, co-authoring in Office for the web, eDiscovery, and auto-labeling policies to work with those files. The Microsoft Purview portal is therefore the tool to use.
Why the other options are wrong
- B. The Microsoft Entra admin center manages identities and access and has no setting for sensitivity label support in SharePoint.
- C. The SharePoint admin center does not contain the setting that enables sensitivity labels for files in SharePoint.
- D. The Microsoft 365 admin center manages users, licenses, and services and does not enable sensitivity label support for SharePoint.
2 reviews for Microsoft SC-401 Exam Practice Questions
Only logged in customers who have purchased this product may leave a review.
How much of the Microsoft SC-401 bank is free?
280 questions in the bankEach step includes the one before, so buying only adds new questions.
- You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
- 5620% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
- 6222% of the bankHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
- 280100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
What’s in the Microsoft SC-401 pack
- 280 questions mapped to the SC-401 exam objectives, across all three domains
- Answers and explanations for every question, including why each wrong option is wrong
- A questions-only PDF for timed practice runs
- Instant delivery by email the moment you check out
- Free monthly updates for as long as the exam is live
- Pass or your money back
An SC-401 attempt costs US$165. This pack is US$39, paid once.
What makes the SC-401 hard
SC-400 retired in May 2025, and SC-401 is what replaced it: the same Purview core, rebuilt around a data-security role, with AI security added. Study material written for SC-400 misses a chunk of the current blueprint.
The exam lives in Microsoft Purview's decision points: sensitivity labels versus sensitive information types versus trainable classifiers, DLP policy scoping and priority when rules collide, retention labels versus retention policies, and insider risk management thresholds. The newer layer is securing data that AI touches: Copilot interactions, DSPM for AI, and oversharing surfaced by AI tools.
The three domains are weighted almost identically, at 30 to 35% each, so there is no section that can safely be skimmed. Information protection, DLP and retention, and risk and alert management each decide roughly a third of the score.
About the exam
SC-401 certifies implementing information security in Microsoft 365: information protection, data loss prevention, retention and insider risk with Microsoft Purview, including securing data in AI environments. It replaced SC-400, which retired in May 2025. Renews annually via a free online assessment.
Questions before you buy
How quickly do I receive it?
Straight away. The full PDF and a questions-only copy are emailed to you the moment your payment goes through, and the same links are on your order page.
Are updates included?
Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.
What if I fail the exam?
We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.
What is your pass rate?
99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.
Can I share it with colleagues?
Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.
Related products
-
Microsoft MB-230
459 questionsUpdated Nov 20265.0 (7) US$39 -
Microsoft DP-800
101 questionsUpdated Nov 2026 US$39 -
Microsoft AB-620
116 questionsUpdated Nov 2026 US$39 -
Microsoft AZ-140
363 questionsUpdated Nov 20265.0 (12) US$39
Steve Wu –
Using Certstash for my SC-401 exam prep was the best decision. The materials were so on point that I passed on my very first try. I highly recommend them to anyone who is serious about getting certified.
Yusuf Reyes –
Passed SC-401 easily.