Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 241:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. You create an Azure Advanced Threat Protection (ATP) workspace named Workspace1. The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Azure ATP sensors.

  Solution: You instruct User4 to modify the Azure ATP sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Only Azure ATP administrators can modify the sensors.

  Any global administrator or security administrator on the tenant's Azure Active Directory is automatically an Azure ATP administrator.

  References: https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-role-groups

• Question 242:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a new Microsoft 365 subscription.

  You need to prevent users from sending email messages that contain Personally Identifiable Information (PII).

  Solution: From the Exchange admin center, you create a data loss prevention (DLP) policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 243:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a new Microsoft 365 subscription.

  You need to prevent users from sending email messages that contain Personally Identifiable Information (PII).

  Solution: From the Azure portal, you create a Microsoft Azure Information Protection label and an Azure Information Protection policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 244:

  You have a Microsoft 365 subscription.

  Some users have iPads that are managed by your company.

  You plan to prevent the iPad users from copying corporate data in Microsoft Word and pasting the data into other applications.

  What should you create?

  A. A conditional access policy.

  B. A compliance policy.

  C. An app protection policy.

  D. An app configuration policy.

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/intune/app-protection-policy

• Question 245:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. You create an Azure Advanced Threat Protection (ATP) workspace named Workspace1. The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Azure ATP sensors.

  Solution: You instruct User2 to modify the Azure ATP sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 246:

  Your company has a Microsoft 365 subscription that contains the domains shown in the following table.

  

  The company plans to add a custom domain named fabrikam.com to the subscription and then to enable enrollment of devices to Intune by using auto discovery for Tabrikam.com.

  You need to add a DNS record to the fabnkam.com /on*

  Which record type should you use for the new record?

  A. SRV

  B. PTR

  C. CNAME

  D. TXT

  Correct Answer: C

• Question 247:

  You have a Microsoft Azure Active Directory (Azure AD) tenant named Contoso.onmicrost.com.

  You have a Microsoft 365 subscription.

  You need to ensure that administrations in your organization can manage the configuration settings for the Windows 10 device in your organization.

  What should you configure?

  A. Windows enrollment settings

  B. Mobile device management (MDM) authority

  C. Exchange on-permission access settings

  D. Enrollment restriction

  Correct Answer: D

• Question 248:

  You have a Microsoft 365 subscription.

  Some users have iPads that are managed by your company.

  You plan to prevent the iPad users from copying corporate data in Microsoft Word and pasting the data into other applications.

  What should you create?

  A. an app configuration policy

  B. a compliance policy

  C. a Conditional MOMS policy

  D. an app protection policy

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/intune/app-protection-policy

• Question 249:

  Your company has a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.

  The company purchases a cloud app named App1 that supports Microsoft Cloud App Security monitoring.

  You configure App1 to be available from the My Apps portal.

  You need to ensure that you can monitor App1 from Cloud App Security.

  What should you do?

  A. From the Azure Active Directory admin center, create a conditional access policy.

  B. From the Azure Active Directory admin center, create an app registration.

  C. From the Device Management admin center, create an app protection policy.

  D. From the Device Management admin center, create an app configuration policy.

  Correct Answer: C

  https://docs.microsoft.com/en-us/intune/apps/app-protection-policies

• Question 250:

  You have a Microsoft 365 subscription.

  From the Security and Compliance admin center, you create a content search of all the mailboxes that contain the word Project X.

  You need to export the results of the content search.

  Which of following report do you need to download?

  A. An export key

  B. A password

  C. A user certificate

  D. A certification authority (CA) certificate

  Correct Answer: A