Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 231:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.

  Your company purchases a Microsoft 365 subscription.

  You need to ensure that User1 is assigned the required role to create file policies and manage alerts in the Cloud App Security admin center.

  Solution: From the Azure Active Directory admin center, you assign the Compliance administrator role to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/cloud-app-security/manage-admins

• Question 232:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.

  Your company purchases a Microsoft 365 subscription.

  You need to ensure that User1 is assigned the required role to create file policies and manage alerts in the Cloud App Security admin center. Solution: From the Azure Active Directory admin center, you assign the Security administrator role

  to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/cloud-app-security/manage-admins

• Question 233:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.

  Your company purchases a Microsoft 365 subscription.

  You need to ensure that User1 is assigned the required role to create file policies and manage alerts in the Cloud App Security admin center.

  Solution: From the Security and Compliance admin center, you assign the Security Administrator role to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/cloud-app-security/manage-admins

• Question 234:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a new Microsoft 365 subscription.

  You need to prevent users from sending email messages that contain Personally Identifiable Information (PII).

  Solution: From the Security and Compliance admin center, you create a data loss prevention (DLP) policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 235:

  You have a Microsoft 365 tenant.

  You discover that administrative tasks are unavailable in the Microsoft Office 365 audit logs of the tenant.

  You run the Get-AdminAuditLogConfig cmdlet and receive the following output:

  

  You need to ensure that administrative tasks are logged in the Office 365 audit logs. Which attribute should you modify?

  A. TestCmdletLoggingEnabled

  B. UnifiedAuditLogIngestionEnabled

  C. AdminAuditLogEnabled

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance-audit/set-adminauditlogconfig?view=exchange-ps

• Question 236:

  Your company has a Microsoft 365 subscription. The subscription contains 500 devices that run Windows 10 and 100 devices that run iOS. You need to create Microsoft Intune device configuration profiles to meet the following requirements:

  1.

  Configure Wi-Fi connectivity to a secured network named ContosoNet.

  2.

  Require passwords of at least six characters to lock the devices.

  What is the minimum number of device configuration profiles that you should create?

  A. 4

  B. 2

  C. 1

  D. 0

  Correct Answer: B

• Question 237:

  You have a Microsoft 365 subscription.

  You need to be notified if users receive email containing a file that has a virus.

  What should you do?

  A. From the Exchange admin center, create an in-place eDiscovery and hold.

  B. From the Security and Compliance admin center, create a data governance event.

  C. From the Exchange admin center, create an anti-malware policy.

  D. From the Exchange admin center, create a spam filter policy.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/anti-spam-and-anti-malware-protection

• Question 238:

  The users at your company use Dropbox Business to store documents. The users access Dropbox Business by using the MyApps portal.

  You need to ensure that user access to Dropbox Business is authenticated by using a Microsoft 365 identity. The documents must be protected if the data is downloaded to a device that is not trusted.

  What should you do?

  A. From the Device Management admin center, configure conditional access settings.

  B. From the Azure Active Directory admin center, configure the device settings.

  C. From the Azure Active Directory admin center, configure the organizational relationships settings.

  D. From the Device Management admin center, configure Exchange on-premises access settings.

  Correct Answer: C

• Question 239:

  You have a Microsoft 365 subscription and an on-premises Active Directory domain named contoso.com. All client computers run Windows 10 Enterprise and are joined to the domain.

  You need to enable Windows Defender Credential Guard on all the computers.

  What should you do?

  A. From the Security and Compliance admin center, configure the DKIM signatures for the domain.

  B. From a domain controller, create a Group Policy object (GPO) that enables the Restrict delegation of credentials to remote servers setting.

  C. From the Security and Compliance admin center, create a device security policy.

  D. From a domain controller, create a Group Policy object (GPO) that enabled the Turn On Virtualization Based Security setting.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage

• Question 240:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a new Microsoft 365 subscription.

  You need to prevent users from sending email messages that contain Personally Identifiable Information (PII).

  Solution: From the Cloud App Security admin center, you create an access policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B