Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 11:

  You need to meet the technical requirement for large-volume document retrieval. What should you create?

  A. a data loss prevention (DLP) policy from the Security and Compliance admin center

  B. an alert policy from the Security and Compliance admin center

  C. a file policy from Microsoft Cloud App Security

  D. an activity policy from Microsoft Cloud App Security

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/activity-policies-and-alerts

• Question 12:

  Which report should the New York office auditors view?

  A. DLP policy matches

  B. DLP false positives and overrides

  C. DLP incidents

  D. Top Senders and Recipients

  Correct Answer: C

  This report also shows policy matches over time, like the policy matches report. However, the policy matches report shows matches at a rule level; for example, if an email matched three different rules, the policy matches report shows three

  different line items. By contrast, the incidents report shows matches at an item level; for example, if an email matched three different rules, the incidents report shows a single line item for that piece of content.

  Because the report counts are aggregated differently, the policy matches report is better for identifying matches with specific rules and fine tuning DLP policies. The incidents report is better for identifying specific pieces of content that are

  problematic for your DLP policies.

  References:

  https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

• Question 13:

  You need to meet the technical requirement for the EU PD. data. What should you create?

  A. a retention policy from the Security and Compliance admin center.

  B. a retention policy from the Exchange admin center

  C. a data loss prevention (DLP) policy from the Exchange admin center

  D. a data loss prevention (DLP) policy from the Security and Compliance admin center

  Correct Answer: A

  EU PII wants both documents and email message to be preserved so SandC Admin Center for Retention. If this was for Email only, this probably could have been done in EAC.

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies

• Question 14:

  You need to create the DLP policy to meet the technical requirements. What should you configure first?

  A. sensitive info types

  B. the Insider risk management settings

  C. the event types

  D. the sensitivity labels

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-test-tune-dlp-policy?view=o365-worldwide

• Question 15:

  You need to configure Office on the web to meet the technical requirements. What should you do?

  A. Assign the Global reader role to User1.

  B. Enable sensitivity labels for Office files in SharePoint Online and OneDrive.

  C. Configure an auto-labeling policy to apply the sensitivity labels.

  D. Assign the Office apps admin role to User1.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-sharepointonedrive-files?view=o365-worldwide

• Question 16:

  You create the planned DLP policies.

  You need to configure notifications to meet the technical requirements. What should you do?

  A. From the Microsoft 365 security center, configure an alert policy.

  B. From the Microsoft Endpoint Manager admin center, configure a custom notification.

  C. From the Microsoft 365 admin center, configure a Briefing email.

  D. From the Microsoft 365 compliance center, configure the Endpoint DLP settings.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-configure-view-alertspolicies?view=o365-worldwide

• Question 17:

  You need to create the Safe Attachments policy to meet the technical requirements. Which option should you select?

  A. Replace

  B. Enable redirect

  C. Block

  D. Dynamic Delivery

  Correct Answer: D

  Reference: https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/office-365-security/safe-attachments.md

• Question 18:

  You need to configure the compliance settings to meet the technical requirements. What should you do in the Microsoft Endpoint Manager admin center?

  A. From Compliance policies, modify the Notifications settings.

  B. From Locations, create a new location for noncompliant devices.

  C. From Retire Noncompliant Devices, select Clear All Devices Retire State.

  D. Modify the Compliance policy settings.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 19:

  Your company has a Microsoft 365 tenant.

  The company sells products online and processes credit card information.

  You need to be notified if a file stored in Microsoft SharePoint Online contains credit card information. The file must be removed automatically from its current location until an administrator can review its contents.

  What should you use?

  A. a Microsoft 365 compliance center data loss prevention (DLP) policy

  B. a Microsoft Defender for Cloud Apps access policy

  C. a Microsoft 365 compliance center retention policy

  D. a Microsoft Defender for Cloud Apps file policy

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

• Question 20:

  You have a new Microsoft 365 subscription.

  You need to prevent users from sending email messages that contain Personally Identifiable Information (PII).

  Solution: From the Microsoft 365 compliance center, you create a data loss prevention (DLP) policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Explanation:

  In Microsoft 365, you can create a data loss prevention (DLP) policy in two different admin centers:

  In the Security and Compliance admin center (now known as the Microsoft 365 Compliance Center), you can create a single DLP policy to help protect content in SharePoint, OneDrive, Exchange, Teams, and now Endpoint Devices.

  In the Exchange admin center, you can create a DLP policy to help protect content only in Exchange.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/how-dlp-works-between-admin-centers?view=o365-worldwide