SC-400 Exam QuestionsBrowse all questions from this exam
Go to Exam

SC-400 Exam - Question 114

You have a data loss prevention (DLP) policy that applies to the Devices location. The policy protects documents that contain United States passport numbers.

Users report that they cannot upload documents to a travel management website because of the policy.

You need to ensure that the users can upload the documents to the travel management website. The solution must prevent the protected content from being uploaded to other locations.

Which Microsoft 365 Endpoint data loss prevention (Endpoint DLP) setting should you configure?

Show Answer
Correct Answer: D

To allow users to upload documents containing sensitive information, such as United States passport numbers, to a specific travel management website, you need to configure the 'Service domains' setting. By adding the domain of the travel management website to the allowed list, users will be able to upload the protected content to this specific location while preventing uploads to other domains. This setting ensures that sensitive data is restricted and controlled, adhering to the DLP policies while allowing necessary exceptions.

Discussion

4 comments
Sign in to comment
ExamReviewerIZ
Oct 22, 2022

Correct, "Service Domain" (in Allow mode we add the website to the list, or if it's in Block mode we remove the website from the list)

sergioandreslq
Dec 23, 2022

referencei: https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-using?view=o365-worldwide#service-domains You can control whether sensitive files protected by your policies can be uploaded to specific service domains from Microsoft Edge. If the list mode is set to Block, then user will not be able to upload sensitive items to those domains. When an upload action is blocked because an item matches a DLP policy, DLP will either generate a warning or block the upload of the sensitive item. If the list mode is set to Allow, then users will be able to upload sensitive items only to those domains, and upload access to all other domains is not allowed. The Service domains setting only applies to files uploaded using Microsoft Edge or Google Chrome with the the Microsoft Compliance Extension installed.

wooyourdaddyOption: D
Jun 17, 2023

I wrote the exam today, this question was on it, I choose D, scored 890!

xswe
Apr 9, 2024

Since they are asking for a configuration that will make it possible for users to upload the sensitive documents to a travel mgnt website you want to add this domain to the service domains, founder under Endpoint DLP in Purview and under Broswer and domain restricitons to sensitive data.

Domza
Nov 9, 2024

Correct~