Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 181:

  You have a Microsoft 365 E5 subscription that uses Azure Advanced Threat Protection (ATP).

  You need to create a detection exclusion in Azure ATP.

  Which tool should you use?

  A. the Security and Compliance admin center

  B. Microsoft Defender Security Center

  C. the Microsoft 365 admin center

  D. the Azure Advanced Threat Protection portal

  E. the Cloud App Security portal

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is

  https://docs.microsoft.com/en-us/defender-for-identity/excluding-entities-from-detections

• Question 182:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Azure Active Directory admin center, you assign SecAdmin1 the Teams Service Administrator role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to assign the Security Administrator role.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide

• Question 183:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the SharePoint admin role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to assign the Security Administrator role.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide

• Question 184:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Azure Active Directory admin center, you assign SecAdmin1 the Security administrator role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide

• Question 185:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

  Solution: From the Endpoint Management admin center, you create a device configuration profile.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to create a trusted location and a conditional access policy.

• Question 186:

  You have a Microsoft 365 E5 subscription that uses Azure Advanced Threat Protection (ATP).

  You need to create a detection exclusion in Azure ATP.

  Which tool should you use?

  A. the Security and Compliance admin center

  B. Microsoft Defender Security Center

  C. the Microsoft 365 admin center

  D. the Azure Advanced Threat Protection portal

  E. the Cloud App Security portal

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is https://docs.microsoft.com/en-us/defender-for-identity/excluding-entities-from-detections

• Question 187:

  You have a Microsoft 365 E5 subscription.

  Users have the devices shown in the following table.

  

  On which devices can you manage apps by using app configuration policies in Microsoft Endpoint Manager?

  A. Device1, Device4, and Device6

  B. Device2, Device3, and Device5

  C. Device1, Device2, Device3, and Device6

  D. Device1, Device2, Device4, and Device5

  Correct Answer: C

  You can create and use app configuration policies to provide configuration settings for both iOS/iPadOS or Android apps on devices that are and are not enrolled in Microsoft Endpoint Manager.

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

• Question 188:

  Your company has digitally signed applications.

  You need to ensure that Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) considers the digitally signed applications safe and never analyzes them.

  What should you create in the Microsoft Defender Security Center?

  A. a custom detection rule

  B. an allowed/blocked list rule

  C. an alert suppression rule

  D. an indicator

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/manage-indicators

• Question 189:

  You have a Microsoft 365 E5 subscription.

  Users have the devices shown in the following table.

  

  On which devices can you manage apps by using app configuration policies in Microsoft Endpoint Manager?

  A. Device1, Device4, and Device6

  B. Device2, Device3, and Device5

  C. Device1, Device2, Device3, and Device6

  D. Device1, Device2, Device4, and Device5

  Correct Answer: C

  You can create and use app configuration policies to provide configuration settings for both iOS/iPadOS or Android apps on devices that are and are not enrolled in Microsoft Endpoint Manager.

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

• Question 190:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You copy the Group Policy Administrative Templates from a Windows 10 computer to Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A