Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 161:

  You have a Microsoft 365 E5 tenant that contains 100 Windows 10 devices.

  You plan to deploy a Windows 10 Security Baseline profile that will protect secrets stored in memory. What should you configure in the profile?

  A. Microsoft Defender Credential Guard

  B. BitLocker Drive Encryption (BitLocker)

  C. Microsoft Defender

  D. Microsoft Defender Exploit Guard

  Correct Answer: A

• Question 162:

  You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.

  

  You plan to review device startup performance issues by using Endpoint analytics. Which devices can you monitor by using Endpoint analytics?

  A. Device1 only

  B. Device1 and Device2 only

  C. Device1, Device2, and Device3 only

  D. Device1, Device2, and Device4 only

  E. Device1, Device2, Device3, and Device4

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/analytics/overview

• Question 163:

  You have a Microsoft 365 E5 tenant that contains four devices enrolled in Microsoft Intune as shown in the following table.

  

  You plan to deploy Microsoft 365 Apps for enterprise by using Microsoft Endpoint Manager. To which devices can you deploy Microsoft 365 Apps for enterprise?

  A. Device1 only

  B. Device1 and Device3 only

  C. Device2 and Device4 only

  D. Device1, Device2, and Device3 only

  E. Device1, Device2, Device3, and Device4

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-add

• Question 164:

  You have a Microsoft 365 E5 subscription.

  You plan to deploy 100 new Windows 10 devices.

  You need to identify the appropriate version of Windows 10 for the new devices. The version must meet the following requirements:

  1.

  Be serviced for a minimum of 24 months.

  2.

  Support Microsoft Application Virtualization (App-V). Which version should you identify?

  A. Windows 10 Pro, version 1909

  B. Windows 10 Pro, version 2004

  C. Windows 10 Enterprise, version 1909

  D. Windows 10 Enterprise, version 2004

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/release-health/release-information

  https://docs.microsoft.com/en-us/windows/application-management/app-v/appv-supported-configurations

• Question 165:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You raise the domain functional level to Windows Server 2019. You copy the Group Policy Administrative Templates from a Windows 10 computer to the Netlogon share on all the domain controllers.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 166:

  You have Windows 10 devices that are managed by using Microsoft Endpoint Manager. You need to configure the security settings in Microsoft Edge.

  What should you create in Microsoft Endpoint Manager?

  A. an app configuration policy

  B. an app

  C. a device configuration profile

  D. a device compliance policy

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/deployedge/configure-edge-with-intune

• Question 167:

  You have a Microsoft 365 subscription.

  You need to grant a user named User1 access to download compliance reports from the Security and Compliance admin center. The solution must use the principle of least privilege.

  What should you do?

  A. Add User1 to the Service Assurance User role group.

  B. Create a new role group that has the Preview role and add User1 to the role group.

  C. Add User1 to the Compliance Administrator role group.

  D. Add User1 to the Security Reader role group.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/download-existing-reports?view=o365-worldwide

• Question 168:

  You have a Microsoft 365 E5 tenant that contains the resources shown in the following table.

  

  To which resources can you apply a sensitivity label by using an auto-labeling policy?

  A. Mailbox1 and Site1 only

  B. Mailbox1, Account1, and Site1 only

  C. Account1 and Site1 only

  D. Mailbox1, Account1, Site1, and Channel1

  E. Account1, Site1, and Channel1 only

  Correct Answer: E

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

• Question 169:

  You have a Microsoft 365 E5 subscription.

  All users have Mac computers. All the computers are enrolled in Microsoft Endpoint Manager and onboarded to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP).

  You need to configure Microsoft Defender ATP on the computers.

  What should you create from the Endpoint Management admin center?

  A. a device configuration profile

  B. an update policy for iOS

  C. a Microsoft Defender ATP baseline profile

  D. a mobile device management (MDM) security baseline profile

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure

• Question 170:

  You have a Microsoft 365 tenant that uses Microsoft Endpoint Manager for device management. You need to add the phone number of the help desk to the Company Portal app. What should you do?

  A. From Customization in the Microsoft Endpoint Manager admin center, modify the support information for the tenant.

  B. From the Microsoft Endpoint Manager admin center, create an app configuration policy.

  C. From the Microsoft 365 admin center, modify Organization information.

  D. From the Microsoft 365 admin center, modify Help desk information.

  Correct Answer: A

  Reference: https://systemcenterdudes.com/intune-company-portal-customization/