Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 151:

  You have a Microsoft 365 E5 tenant.

  You create an auto-labeling policy to encrypt emails that contain a sensitive info type. You specify the locations where the policy will be applied.

  You need to deploy the policy.

  What should you do first?

  A. Review the sensitive information in Activity explorer

  B. Turn on the policy

  C. Run the policy in simulation mode

  D. Configure Azure Information Protection analytics

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically? view=o365-worldwide

• Question 152:

  You have a Microsoft 365 E5 tenant.

  You need to be notified when emails with attachments that contain sensitive personal data are sent to external recipients.

  Which two policies can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. a data loss prevention (DLP) policy

  B. a sensitivity label policy

  C. a Microsoft Cloud App Security file policy

  D. a communication compliance policy

  E. a retention label policy

  Correct Answer: AD

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/communication-compliance?view=o365-worldwide

• Question 153:

  You have a Microsoft 365 E5 tenant.

  You need to evaluate compliance with European Union privacy regulations for customer data.

  What should you do in the Microsoft 365 compliance center?

  A. Create a Data Subject Request (DSR)

  B. Create a data loss prevention (DLP) policy for General Data Protection Regulation (GDPR) data

  C. Create an assessment based on the EU GDPR assessment template

  D. Create an assessment based on the Data Protection Baseline assessment template

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/compliance/regulatory/gdpr#data-protection-impact-assessment https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-templates-list? view=o365-worldwide

• Question 154:

  You have a Microsoft 365 E5 subscription.

  All users have Mac computers. All the computers are enrolled in Microsoft Endpoint Manager and onboarded to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP).

  You need to configure Microsoft Defender ATP on the computers.

  What should you create from the Endpoint Management admin center?

  A. a Microsoft Defender ATP baseline profile

  B. a device configuration profile

  C. an update policy for iOS

  D. a mobile device management (MDM) security baseline profile

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure

• Question 155:

  You have a Microsoft 365 tenant.

  You plan to manage incidents in the tenant by using the Microsoft 365 security center.

  Which Microsoft service source will appear on the Incidents page of the Microsoft 365 security center?

  A. Microsoft Cloud App Security

  B. Azure Sentinel

  C. Azure Web Application Firewall

  D. Azure Defender

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/investigate-alerts?view=o365-worldwide

• Question 156:

  You have a Microsoft 365 tenant.

  You plan to manage incidents in the tenant by using the Microsoft 365 security center.

  Which Microsoft service source will appear on the Incidents page of the Microsoft 365 security center?

  A. Azure Sentinel

  B. Azure Information Protection

  C. Azure Security Center

  D. Microsoft Defender for Identity

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/investigate-alerts?view=o365-worldwide

• Question 157:

  The users at your company use Dropbox Business to store documents. The users access Dropbox Business by using the MyApps portal.

  You need to ensure that user access to Dropbox Business is authenticated by using a Microsoft 365 identity. The documents must be protected if the data is downloaded to a device that is not trusted.

  What should you do?

  A. From the Azure Active Directory admin center, configure conditional access settings.

  B. From the Azure Active Directory admin center, configure the device settings.

  C. From the Azure Active Directory admin center, configure organizational relationships settings.

  D. From the Endpoint Manager admin center, configure device enrollment settings.

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/campaigns/m365-campaigns-conditional-access? view=o365-worldwide

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access- conditions

• Question 158:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer that runs Windows 10.

  You need to verify which version of Windows 10 is installed.

  Solution: From the Settings app, you select Update and Security to view the update history.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference:

  https://support.microsoft.com/en-us/windows/which-version-of-windows-operating-system-am-i-running- 628bec99-476a-2c13-5296-9dd081cdd808

• Question 159:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer that runs Windows 10.

  You need to verify which version of Windows 10 is installed.

  Solution: At a command prompt, you run the winver.exe command.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference:

  https://support.microsoft.com/en-us/windows/which-version-of-windows-operating-system-am-i-running- 628bec99-476a-2c13-5296-9dd081cdd808

• Question 160:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer that runs Windows 10.

  You need to verify which version of Windows 10 is installed.

  Solution: From Device Manager, you view the computer properties. Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference:

  https://support.microsoft.com/en-us/windows/which-version-of-windows-operating-system-am-i-running- 628bec99-476a-2c13-5296-9dd081cdd808