Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 2 question 8 discussion

Actual exam question from Microsoft's SC-400

Question #: 8
Topic #: 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You implement Microsoft 365 Endpoint data loss prevention (Endpoint DLP).
You have computers that run Windows 10 and have Microsoft 365 Apps installed. The computers are joined to Azure Active Directory (Azure AD).
You need to ensure that Endpoint DLP policies can protect content on the computers.
Solution: You deploy the Endpoint DLP configuration package to the computers.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-endpoints?view=o365-worldwide

by Eltooth at July 20, 2021, 4:19 a.m.

Comments

Submit Cancel

GY23

Highly Voted 2 years, 1 month ago

@Eltooth, to onboard the machine to Compliance center (as you mentioned in your comment), you need to install the Endpoint DLP package on the device. Only after that it will be onboarded to Compliance Center, you missed this part. Defender for Endpoint has nothing to do with this question. In normal scenarios, if and only if the Defender for Endpoint was ALREADY onboarded on the device, then it would be a plus and it would appear automatically in Endpoint DLP dashboard. So no package will be required on the device anymore. Answer is Yes.

upvoted 15 times

sergioandreslq

1 year, 10 months ago

we need to assume that the Windows Defender for an endpoint is not present on the endpoint as the question doesn't mention it, meaning, we need to run the "Endpoint DLP configuration package" to begin receiving data from endpoints. https://docs.microsoft.com/en-us/microsoft-365/compliance/device-onboarding-script?view=o365-worldwide

upvoted 3 times

...

Eltooth

Highly Voted 2 years, 3 months ago

No - the machines need to be on boarded into either Compliance Centre or at a minimum have been on boarded withDefender for EndPoint and enabled through Compliance Centre Manager. https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started?view=o365-worldwide#onboarding-devices-into-device-management https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365-worldwide

upvoted 7 times

bowlinbd

2 years, 2 months ago

Should be Yes. Deploying the package is what onboards the devices into the Compliance portal.

upvoted 13 times

...

kiketxu

1 year ago

You right, thanks. You must enable device monitoring first and second onboard your endpoints before you can monitor. Both of these actions are done in the Microsoft Purview compliance portal. With the package you have the second but you need to complete first too. https://learn.microsoft.com/en-us/microsoft-365/compliance/device-onboarding-overview?view=o365-worldwide#onboarding-windows-10-or-windows-11-devices

upvoted 1 times

...

xswe

Most Recent 6 months, 2 weeks ago

The DLP configuration packet will onboard the computers which is what we are looking for here to ensure that Endpoint DLP will protect the computers

upvoted 1 times

...

NinjaSchoolProfessor

10 months ago

Answer [A] - The reference to deploying the Endpoint DLP configuration package implies that you're installing all required agents to communicate to M365 defender / Purview Compliance Center. https://learn.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started?view=o365-worldwide#windows-10-and-windows-11-onboarding-procedures

upvoted 2 times

...

PrettyFlyWifi

1 year, 9 months ago

This seems like it should be Yes... https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started?view=o365-worldwide#windows-10-and-windows-11-onboarding-procedures