Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 191:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  From the Security and Compliance admin center, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group.

  You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States.

  Solution: From the Azure Active Directory admin center, you create a conditional access policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 192:

  You have a Microsoft 365 subscription.

  From the Security and Compliance admin center, you create a content search of a mailbox.

  You need to view the content of the mail messages found by the search as quickly as possible.

  What should you select from the Content search settings?

  A. Export report

  B. Export results

  C. Re-run

  D. View results

  Correct Answer: B

  There is no ‘View Results” option. You can preview results but that will only show up to 100 emails. To guarantee you’re getting all results, you’ll need to export them to a PST file.

  References: https://docs.microsoft.com/en-us/microsoft-365/compliance/limits-for-content-search

• Question 193:

  Your company has a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.

  A user named User1 is a member of a dynamic group named Group1.

  User1 reports that he cannot access documents shared to Group1.

  You discover that User1 is no longer a member of Group1.

  You suspect that an administrator made a change that caused User1 to be removed from Group1.

  You need to identify which administrator made the change.

  Which audit log activity should you search in the Security and Compliance admin center?

  A. Azure AD group administration activities – Removed member from group

  B. User administration activities – Updated user

  C. Azure AD group administration activities – Updated group

  Correct Answer: C

• Question 194:

  You need to grant a user a named User1 access to download compliance reports from the Security and Compliance reports from the Security from the Security and Compliance admin center. The solution must use the principle of least privilege.

  What should you do?

  A. Add User1 to the Security Reader role group

  B. Create a new role group that has the Preview role and add User1 to the role group.

  C. Add user1 to the Compliance Administrator role group.

  D. Add User1 to the Service Assurance User role group.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/download-existing-reports?view=o365-worldwide

• Question 195:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it As a result these questions will not appear In the review screen.

  You have a Microsoft Azure Active directory (Azure AD) tenant named contoso.com.

  You create an Azure Advanced Threat Protection (ATP) workspace named Workspace1.

  

  The tenet contains the users shown in the following table.

  You need to modify the configuration of the Azure ATP sensors.

  Solution: You instruct User 3 to modify the Azure ATP sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Access to the Defender for Identity portal is granted only to users within the Defender for Identity security groups, within your Azure Active Directory, as well as global and security admins of the tennant.

  Reference: https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-role-groups

• Question 196:

  You enable the Azure AD Identity Protection weekly digest email. You create the users shown in the following table.

  

  Which users will receive the weekly digest email automatically?

  A. Admin2, Admin3, and Admin4 only

  B. Admin1, Admin2, Admin3, and Admin4

  C. Admin2 and Admin3 only

  D. Admin3 only

  E. Admin1 and Admin3 only

  Correct Answer: E

  By default, all Global Admins receive the email. Any newly created Global Admins, Security Readers or Security Administrators will automatically be added to the recipients list.

• Question 197:

  You have a Microsoft 365 subscription.

  You need to create a data loss prevention (DLP) policy that is configured to use the Set headers action.

  To which location can the policy be applied?

  A. OneDrive accounts

  B. Exchange email

  C. Teams chat and channel messages

  D. SharePoint sites

  Correct Answer: B

• Question 198:

  You have a Microsoft 365 E5 subscription.

  You need to be notified if users receive email containing a file that has a virus.

  What should you do?

  A. From the Exchange admin center, create an in-place eDiscovery and hold.

  B. From the Exchange admin center, create a spam filter policy.

  C. From the Exchange admin center, create an anti-malware policy.

  D. From the Exchange admin center, create a mail flow rule.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/anti-spam-and-anti-malware-protection

• Question 199:

  You have a Microsoft 365 subscription.

  You need to identify which administrative users performed eDiscovery searches during the past week.

  What should you do from the Security and Compliance admin center?

  A. Perform a content search

  B. Create a supervision policy

  C. Create an eDiscovery case

  D. Perform an audit log search

  Correct Answer: D

• Question 200:

  You have a hybrid Azure Active Directory (Azure AD) tenant and a Microsoft Endpoint Configuration Manager deployment. You have the devices shown in the following table.

  

  You plan to enable co-management.

  You need to identify which devices support co-management without requiring the installation of additional software.

  Which devices should you identify?

  A. Device1 only

  B. Device2 only

  C. Device3 only

  D. Device2 and Device3 only

  E. Device1, Device2, and Device3

  Correct Answer: D