SC-401 Practice Question 3551
Exam: SC-401
Domain: Implement data loss prevention and retention
Difficulty: medium
You want to block Windows 11 endpoint users from copying sensitive intellectual property files to USB removable flash drives, while allowing read-only access. Which Endpoint DLP action enforces this?
Answer Options
A
Set "Copy to removable USB media" to Block in Endpoint DLP settings
B
Disable USB controllers in the computer BIOS
C
Deploy BitLocker Drive Encryption to client hard drives
D
Unassign Microsoft 365 licenses from users
Correct Answer
A: Set "Copy to removable USB media" to Block in Endpoint DLP settings
Explanation
Under Endpoint DLP actions within the policy rule, configure "Audit or restrict activities on Windows devices" and set "Copy to removable USB media" to "Block".