Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 171:

  You have a Microsoft 365 tenant that contains a Windows 10 device named Device1 and the Microsoft Endpoint Manager policies shown in the following table.

  

  A. only the settings of Policy!

  B. only the settings of Policy2

  C. only the settings of Policy3

  D. no settings

  Correct Answer: C

• Question 172:

  You have a Microsoft 365 tenant that contains 1,000 iOS devices enrolled in Microsoft Intune.

  You plan to purchase volume-purchased apps and deploy the apps to the devices.

  You need to track used licenses and manage the apps by using Intune.

  What should you use to purchase the apps?

  A. Microsoft Store for Business

  B. Apple Business Manager

  C. Apple iTunes Store

  D. Apple Configurator

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/vpp-apps-ios

• Question 173:

  You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.

  

  You plan to implement attack surface reduction (ASR) rules. Which devices will support the ASR rules?

  A. Device 1, Device2, and Device3 only

  B. Device3onry

  C. Device2 and Device3 only

  D. Device1, Device2, Devices and Device4

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-attack-surface-reduction?view=o365-worldwide#requirements

• Question 174:

  Your company has offices in five cities.

  The company has a Microsoft 365 tenant.

  Each office is managed by a local administrator.

  You plan to deploy Microsoft Intune.

  You need to recommend a solution to manage resources in intune that meets the following requirements:

  1.

  Local administrators must be able to manage only the resources in their respective office.

  2.

  Local administrators must be prevented from managing resources in other offices.

  3.

  Administrative effort must be minimized. What should you include in the recommendation?

  A. device categories

  B. scope tags

  C. configuration profiles

  D. conditional access policies

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/scope-tags

• Question 175:

  You have a Microsoft 365 E5 tenant.

  You plan to deploy 1.000 new iOS devices to users. The devices will be shipped directly from the supplier to the users.

  You need to recommend a Microsoft Intune enrollment option that meets the following requirements:

  1.

  Minimizes user interaction

  2.

  Minimizes administrative effort

  3.

  Automatically installs corporate apps What should you recommend?

  A. Automated Device Enrollment (ADE)

  B. bring your own device (BYOD) user and device enrollment

  C. Apple Configurator enrollment

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/ios-enroll

• Question 176:

  You have a Microsoft 365 tenant that is signed up for Microsoft Store for Business and contains a user named User1. You need to ensure that User1 can perform the following tasks in Microsoft Store for Business:

  1.

  Assign licenses to users.

  2.

  Procure apps from Microsoft Store.

  3.

  Manage private store availability for all items.

  The solution must use the principle of least privilege.

  Which Microsoft Store for Business role should you assign to User1?

  A. Basic Purchaser

  B. Device Guard signer

  C. Admin

  D. Purchaser

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-store/microsoft-store-for-business-overview

• Question 177:

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Azure Active Directory admin center, you assign SecAdmin1 the Teams Service Administrator role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to assign the Security Administrator role.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365- atp?view=o365-worldwide

• Question 178:

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the SharePoint admin role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to assign the Security Administrator role.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365- atp?view=o365-worldwide

• Question 179:

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Azure Active Directory admin center, you assign SecAdmin1 the Security administrator role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 180:

  You have a Microsoft 365 subscription.

  You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

  Solution: From the Endpoint Management admin center, you create a device configuration profile.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to create a trusted location and a conditional access policy.