Exam SC-401 topic 2 question 66 discussion

Actual exam question from Microsoft's SC-401

Question #: 66
Topic #: 2

HOTSPOT
-

You have a Microsoft 365 E5 subscription that uses Microsoft Purview and just-in-time (JIT) protection. Fallback action in case of failure is set to Block users from completing actions.

The subscription contains the users shown in the following table.

The subscription contains the devices shown in the following table.

The devices contain the files shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Seidor_Analytics at Sept. 5, 2025, 8:25 a.m.

Comments

Submit Cancel

RickySmith

Highly Voted 2 months ago

Y - User/Device onboarded and protected and fallback set to block, so "Not evaluated" file will be blocked. N - User 2 is not included in scope for JIT protection N - Device is not onboarded to Defender

upvoted 5 times

...

Farreller

Most Recent 2 days, 8 hours ago

If User1 attempts to copy File1.docx to a removable USB drive, JIT will block the action. User1 is in JIT scope ✅ Device1 is onboarded ✅ File1.docx is not evaluated ❌ → JIT cannot enforce without classification. Answer: No If User2 signs in to Device2 and attempts to attach File2.pdf to an email, JIT will block the action. User2 is not configured for JIT ❌ Even though Device2 is onboarded and File2.pdf is evaluated, JIT does not apply to User2. Answer: No If User3 attempts to copy File3.xlsx to a network share, JIT will generate an audit event. User3 is in JIT scope ✅ Device3 is not onboarded ❌ File3.xlsx is not evaluated ❌ → No enforcement or audit because device is not onboarded. Answer: No ✅ Final Answers: Statement 1: No Statement 2: No Statement 3: No

upvoted 2 times

Alcpt

6 hours, 38 minutes ago

Yes , No, No File1.docx (Not evaluated) - JIT can still protect it based on location/user policies. JIT primarily needs device onboarding and user scope - file classification enhances precision but isn't required for basic JIT functionality.

upvoted 1 times

...