Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 201:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You upgrade Server1 to Windows Server 2019.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 202:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You copy the Group Policy Administrative Templates from a Windows 10 computer to Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 203:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You raise the forest functional level to Windows Server 2016. You copy the Group Policy Administrative Templates from a Windows 10 computer to the Netlogon share on all the domain controllers.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 204:

  From the Security and Compliance admin center, you create a content export as shown in the exhibit. (Click the Exhibit tab.)

  

  What will be excluded from the export?

  A. a 10-MB XLSX file

  B. a 5-MB MP3 file

  C. a 5-KB RTF file

  D. an 80-MB PPTX file

  Correct Answer: B

  Unrecognized file formats are excluded from the search.

  Certain types of files, such as Bitmap or MP3 files, don't contain content that can be indexed. As a result, the search indexing servers in Exchange and SharePoint don't perform full-text indexing on these types of files. These types of files are

  considered to be unsupported file types.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/partially-indexed-items-in-content-search?view=o365-worldwide https://docs.microsoft.com/en-us/office365/securitycompliance/export-a-content-search-report

• Question 205:

  You have a Microsoft 365 subscription that contains a user named User1.

  You need to ensure that User1 can search the Microsoft 365 audit logs from the Security and Compliance admin center.

  Which role should you assign to User1?

  A. View-Only Audit Logs in the Security and Compliance admin center

  B. View-Only Audit Logs in the Exchange admin center

  C. Security reader in the Azure Active Directory admin center

  D. Security Reader in the Security and Compliance admin center

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide

• Question 206:

  You have a Microsoft 365 subscription.

  Your company has a customer ID associated to each customer. The customer IDs contain 10 numbers followed by 10 characters. The following is a sample customer ID: 12-456-7890-abc-de-fghij.

  You plan to create a data loss prevention (DLP) policy that will detect messages containing customer IDs.

  What should you create to ensure that the DLP policy can detect the customer IDs?

  A. a sensitive information type

  B. a sensitivity label

  C. a supervision policy

  D. a retention label

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/custom-sensitive-info-types?view=o365-worldwide

• Question 207:

  You have a Microsoft 365 subscription that uses Security and Compliance retention policies.

  You implement a preservation lock on a retention policy that is assigned to all executive users.

  Which two actions can you perform on the retention policy? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point?

  A. Add locations to the policy

  B. Reduce the duration of policy

  C. Remove locations from the policy

  D. Extend the duration of the policy

  E. Disable the policy

  Correct Answer: AD

• Question 208:

  You have a Microsoft 365 subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

  

  You create and assign a data loss prevention (DLP) policy named Policy1. Policy1 is configured to prevent documents that contain Personally Identifiable Information (PII) from being emailed to users outside your organization.

  To which users can User1 send documents that contain PII?

  A. User2 only

  B. User2 and User3 only

  C. User2, User3, and User4 only

  D. User2, User3, User4, and User5

  Correct Answer: B

  Guest accounts are considered "outside your organization". Users who have non-guest accounts in a host organization's Active Directory or Azure Active Directory tenant are considered as people inside the organization.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide

• Question 209:

  You have a Microsoft 365 subscription that uses a default domain named contoso.com.

  You have two users named User1 and User2.

  From the Security and Compliance admin center, you add User1 to the eDiscovery Manager role group.

  From the Security and Compliance admin center, User1 creates a case named Case1.

  You need to ensure that User1 can add User2 as a case member. The solution must use the principle of least privilege.

  To which role group should you add User2?

  A. eDiscovery Manager

  B. eDiscovery Administrator

  C. Security Administrator

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/add-or-remove-members-from-a-case-in-advanced-ediscovery?view=o365-worldwide

• Question 210:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). When users attempt to access the portal of a partner company, they receive the message shown in the following exhibit.

  

  You need to enable user access to the partner company's portal. Which Microsoft Defender ATP setting should you modify?

  A. Custom detections

  B. Advanced hunting

  C. Alert notifications

  D. Indicators

  E. Alert suppression

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/manage-indicators