SC-401 practice question 2 of 25

You implement Microsoft 36S Endpoint data loss pi event ion (Endpoint DIP). You have computer that run Windows 11 and have Microsoft 365 Apps…

Choose your answer, then check it against the explanation and the full breakdown below.

Domain Implement data loss prevention

You implement Microsoft 36S Endpoint data loss pi event ion (Endpoint DIP). You have computer that run Windows 11 and have Microsoft 365 Apps instated The computers are joined to a Microsoft Entra tenant You need to ensure that endpoint DIP policies can protect content on the computers. Solution: You deploy the Microsoft Purview Information Protection client to the computers. Does this meet the goal?

Answer options

Correct Answer:

Explanation

The proposed solution is incorrect. Endpoint Data Loss Prevention (DLP) functionality is natively integrated into the Windows 10 and Windows 11 operating systems. To enable Endpoint DLP policies to protect content on these computers, the devices must be onboarded into the Microsoft Purview compliance portal. The installation of the Microsoft Purview Information Protection (MIP) client is not the required step to enable the Endpoint DLP engine. The MIP client's primary function is for classification and labeling, and its functionality is increasingly being built directly into Microsoft 365 Apps, making the separate client unnecessary for this specific goal.

(Note: The provided question format with two "Yes" options is non-standard. Assuming a standard "A. Yes / B. No" format, the correct answer is No.)

Why Incorrect

A. Yes: This is incorrect because installing the Microsoft Purview Information Protection client does not enable the Endpoint DLP engine on Windows 11. The required action is device onboarding into Microsoft Purview.

References

1. Microsoft Learn. (2024). Get started with Endpoint data loss prevention. "For devices running Windows 10

Windows 11 and macOS (three latest released versions)

you don't need to install any additional software. Everything is already included." This source explicitly states that no additional client software is needed for Endpoint DLP on Windows 11.

URL: https://learn.microsoft.com/en-us/purview/endpoint-dlp-getting-started

2. Microsoft Learn. (2024). Onboard devices into Microsoft Purview solutions. This document details the required onboarding process for devices to be managed by Purview solutions

including Endpoint DLP

confirming that onboarding

not client installation

is the key step.

URL: https://learn.microsoft.com/en-us/purview/device-onboarding-overview

3. Microsoft Learn. (2024). Microsoft Purview Information Protection client - Version release history & support policy. This page describes the purpose of the MIP client

which is focused on applying sensitivity labels

confirming its role is distinct from enabling the core Endpoint DLP engine.

URL: https://learn.microsoft.com/en-us/purview/information-protection-client-version-release-history

Question 2 of 25

Question breakdown

Tests: Onboard Windows devices for Endpoint DLP
Difficulty: Easy

Key idea: Endpoint DLP is built into Windows 10/11, and devices need to be onboarded to Microsoft Purview rather than given an extra client.

How to reach the answer

The goal is for Endpoint DLP policies to protect content on Windows 11 devices.
Windows 10/11 already contains the Endpoint DLP components, so no extra agent is needed.
What activates protection is device onboarding to Purview, for example through Intune, Group Policy, a script, or Defender for Endpoint.
The Purview Information Protection client handles labeling and scanning, not Endpoint DLP enablement, so the solution does not meet the goal.
Both options are printed as 'Yes', but option B is clearly meant to read 'No'.

Each option

AIncorrect. Installing the Information Protection client does not onboard the device to Purview, so Endpoint DLP policies still cannot apply.
BCorrect. This option is intended as 'No': the goal is not met because device onboarding, not a client install, is what Endpoint DLP requires.

Common trap: Assuming any Purview-branded client must be installed for Purview protection to reach endpoints, when Endpoint DLP is native to Windows and depends only on onboarding.

In practice: When rolling out Endpoint DLP, admins push the Purview onboarding package with Intune or rely on existing Defender for Endpoint onboarding. They then confirm the devices appear in Purview device management.

Remember: Endpoint DLP on Windows 10/11 requires device onboarding to Purview, not the Information Protection client.

Official documentation: Get started with Endpoint data loss prevention · Onboard devices into Microsoft Purview solutions

Drafted with AI assistance and checked against the answer key.

Keep practicing

Take the free SC-401 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test