Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 221:

  You have a Microsoft 365 E5 subscription.

  You run an eDiscovery search that returns the following Azure Rights Management (Azure RMS) ?encrypted content:

  1.

  Microsoft Exchange emails

  2.

  Microsoft OneDrive documents

  3.

  Microsoft SharePoint documents

  Which content can be decrypted when you export the eDiscovery search results?

  A. Exchange emails only

  B. SharePoint documents, OneDrive documents, and Exchange emails

  C. OneDrive documents only

  D. SharePoint documents and OneDrive documents only

  E. SharePoint documents only

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide

• Question 222:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.

  

  You enroll all the computers in Upgrade Readiness.

  You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.

  Solution: You set the importance status of App2 to Low install count.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  If an app is installed on less than 2% of the targeted devices, it's marked Low install count. Two percent is the default value. You can adjust the threshold in the readiness settings from 0% to 10%. Desktop Analytics automatically marks these apps as Ready to upgrade.

  Reference: https://docs.microsoft.com/en-us/configmgr/desktop-analytics/about-deployment-plans

• Question 223:

  Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

  You sign up for Microsoft Store for Business.

  The tenant contains the users shown in the following table.

  

  Microsoft Store for Business has the following Shopping behavior settings:

  1.

  Make everyone a Basic Purchaser is set to Off.

  2.

  Allow app requests is set to On.

  You need to identify which users can add apps to the Microsoft Store for Business private store.

  Which users should you identify?

  A. User1 and User2 only

  B. User3 only

  C. User1 only

  D. User3 and User4 only

  Correct Answer: A

• Question 224:

  You have a Microsoft 365 subscription.

  You need to be notified if users receive email containing a file that has a virus.

  What should you do?

  A. From the Exchange admin center, create a spam filter policy.

  B. From the Security and Compliance admin center, create a data governance event.

  C. From the Security and Compliance admin center, create an alert policy.

  D. From the Exchange admin center, create a mail-flow rule.

  Correct Answer: D

  You can inspect email attachments in your Exchange Online organization by setting up mail flow rules. Exchange Online offers mail flow rules that provide the ability to examine email attachments as a part of your messaging security and compliance needs. When you inspect attachments, you can then take action on the messages that were inspected based on the content or characteristics of those attachments.

  Incorrect answers:

  A: A spam filter policy includes selecting the action to take on messages that are identified as spam. Spam filter policy settings are applied to inbound messages.

  B: A data governance event commences when an administrator creates it, following which background processes look for content relating to the event and take the retention action defined in the label. The retention action can be to keep or remove items, or to mark them for manual disposition.

  References: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-anti-malware-policies https://www.petri.com/office-365-event-based-retention

• Question 225:

  You have a Microsoft 365 subscription.

  From the subscription, you perform an audit log search, and you download all the results.

  You plan to review the audit log data by using Microsoft Excel.

  You need to ensure that each audited property appears in a separate Excel column.

  What should you do first?

  A. From Power Query Editor, transform the JSON data.

  B. Format the Operations column by using conditional formatting.

  C. Format the AuditData column by using conditional formatting.

  D. From Power Query Editor, transform the XML data.

  Correct Answer: A

  After you search the Office 365 audit log and download the search results to a CSV file, the file contains a column named AuditData, which contains additional information about each event. The data in this column is formatted as a JSON object, which contains multiple properties that are configured as property:value pairs separated by commas. You can use the JSON transform feature in the Power Query Editor in Excel to split each property in the JSON object in the AuditData column into multiple columns so that each property has its own column. This lets you sort and filter on one or more of these properties

  References: https://docs.microsoft.com/en-us/microsoft-365/compliance/export-view-audit-log-records

• Question 226:

  You have a Microsoft 365 subscription.

  All users have their email stored in Microsoft Exchange Online.

  In the mailbox of a user named User1, you need to preserve a copy of all the email messages that contain the word ProjectX.

  What should you do first?

  A. From the Security and Compliance admin center, create a data loss prevention (DLP) policy.

  B. From the Security and Compliance admin center, create a label and label policy.

  C. From the Security and Compliance admin center, create, create a label and a label policy.

  D. From the Security and Compliance admin center, start a message trace.

  E. From the Exchange admin center, start a mail flow message trace

  Correct Answer: A

  A DLP policy contains a few basic things:

  Where to protect the content: locations such as Exchange Online, SharePoint Online, and OneDrive for Business sites, as well as Microsoft Teams chat and channel messages.

  When and how to protect the content by enforcing rules comprised of:

  Conditions the content must match before the rule is enforced. For example, a rule might be configured to look only for content containing Social Security numbers that's been shared with people outside your organization.

  Actions that you want the rule to take automatically when content matching the conditions is found. For example, a rule might be configured to block access to a document and send both the user and compliance officer an email notification.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies

• Question 227:

  Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory (Azure AD).

  The domain contains two servers named Server1 and Server2 that run Windows Server 2016. Server1 has the File Server Resource Manager role service installed.

  You need to configure Server1 to use the Azure Rights Management (Azure RMS) connector.

  You install the Microsoft Management connector on Server1.

  What should you do next on Server1?

  A. Run the GenConnectorConfig.ps1 script.

  B. Configure the URL of the AIPMigrated group.

  C. Enable BitLocker Drive Encryption (BitLocker).

  D. Install a certification authority (CA).

  Correct Answer: A

  If you want to use the server configuration tool for the RMS connector, to automate the configuration of registry settings on your on-premises servers, download and run the GenConnectorConfig.ps1 script. References:

  https://docs.microsoft.com/en-us/azure/information-protection/install-configure-rms-connector#installing-the-rms-connector

• Question 228:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.

  

  You enroll all the computers in Upgrade Readiness.

  You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.

  Solution: You set the ReadyForWindows status of App1 to Highly adopted.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  App1 has a "low install count" (2% or less) so will be Ready to upgrade. We need to change the setting for App2.

  References: https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-identify-apps

• Question 229:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.

  

  You enroll all the computers in Upgrade Readiness.

  You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.

  Solution: You set the Importance status of App1 to Business critical.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Business Critical will prevent the app having a status of Ready to upgrade.

  References: https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-identify-apps

• Question 230:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.

  

  You enroll all the computers in Upgrade Readiness.

  You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.

  Solution: You set the ReadyForWindows status of App2 to Highly adopted.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  App1 has a "low install count" (2% or less) so will be Ready to upgrade. We just need to change the setting for App2.

  References: https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-identify-apps