Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 251:

  You have a Microsoft 365 subscription.

  From the Security and Compliance admin center, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group.

  You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States.

  Solution: From Windows PowerShell, you run the New-AzureRmRoleAssignment cmdlet with the appropriate parameters.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  References:

  https://docs.microsoft.com/en-us/powershell/module/azurerm.resources/new- azurermroleassignment?view=azurermps-6.13.0

• Question 252:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  From the Security and Compliance admin center, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group.

  You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States.

  Solution: From the Security and Compliance admin center, you modify the roles of the US eDiscovery Managers role group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 253:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. You create an Azure Advanced Threat Protection (ATP) workspace named Workspace1. The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Azure ATP sensors.

  Solution: You instruct User3 to modify the Azure ATP sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Only Azure ATP administrators can modify the sensors.

  Any global administrator or security administrator on the tenant's Azure Active Directory is automatically an Azure ATP administrator.

  Reference:

  https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-role-groups

• Question 254:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. You create an Azure Advanced Threat Protection (ATP) workspace named Workspace1.

  

  The tenant contains the users shown in the following table.

  You need to modify the configuration of the Azure ATP sensors.

  Solution: You instruct User1 to modify the Azure ATP sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Only Azure ATP administrators can modify the sensors.

  Any global administrator or security administrator on the tenant's Azure Active Directory is automatically an Azure ATP administrator.

  References:

  https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-role-groups

• Question 255:

  Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft 365 subscription. The company recently hired four new users who have the devices shown in the following table.

  

  You configure the Microsoft 365 subscription to ensure that the new devices enroll in Microsoft Intune automatically. Which users have a device that can enroll in Microsoft Intune automatically?

  A. User1 and User2 only

  B. User 1, User2, and User only

  C. User1, User2.User3, and User4

  D. User2only

  Correct Answer: D

• Question 256:

  You have a Microsoft 365 subscription that uses a default domain named contoso.com.

  You have two users named User 1 and User2.

  From the Security and Compliance admin center, you add User1 to the ediscovery Manager role group.

  From the Security and Compliance admin center, User1 creates a case named Case1

  You need to ensure that User1 can add User2 as a case member. The solution must use the principle of least privilege.

  To which role group should you add User2?

  A. eDiscovery Manager

  B. eDiscovery Administrator

  C. Security Administrator

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/add-or-remove-members-from- a-case-in-advanced-ediscovery?view=o365-worldwide

• Question 257:

  You have a Microsoft 365 subscription.

  You plan to enable Microsoft Azure Information Protection.

  You need to ensure that only the members of a group named PilotUsers can protect content.

  What should you do?

  A. Run the Add-AadrmRoleBasedAdministrator cmdlet.

  B. Create an Azure Information Protection policy.

  C. Configure the protection activation status for Azure Information Protection.

  D. Run the Set-AadrmOnboardingControlPolicy cmdlet.

  Correct Answer: D

  Reference: https://blogs.technet.microsoft.com/kemckinn/2018/05/17/creating-labels-for-azure-information-protection/

• Question 258:

  Your company has 10 offices.

  The network contains an Active Directory domain named contoso.com. The domain contains 500 client computers. Each office is configured as a separate subnet.

  You discover that one of the offices has the following:

  1.

  Computers that have several preinstalled applications

  2.

  Computers that use nonstandard computer names

  3.

  Computers that have Windows 10 preinstalled

  4.

  Computers that are in a workgroup

  You must configure the computers to meet the following corporate requirements:

  1.

  All the computers must be joined to the domain.

  2.

  All the computers must have computer names that use a prefix of CONTOSO.

  3.

  All the computers must only have approved corporate applications installed.

  You need to recommend a solution to redeploy the computers. The solution must minimize the deployment time.

  What should you recommend?

  A. a provisioning package

  B. wipe and load refresh

  C. Windows Autopilot

  D. an in-place upgrade

  Correct Answer: A

  By using a Provisioning, IT administrators can create a self-contained package that contains all of the configuration, settings, and apps that need to be applied to a device. Incorrect Answers:

  C: With Windows Autopilot the user can set up pre-configure devices without the need consult their IT administrator.

  D: Use the In-Place Upgrade option when you want to keep all (or at least most) existing applications.

  References: https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot

• Question 259:

  Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

  You sign for Microsoft Store for Business.

  The tenant contains the users shown in the following table.

  

  Microsoft Store for Business has the following Shopping behavior settings:

  1.

  Allow users to shop is set to On

  2.

  Make everyone a Basic Purchaser is set to Off

  You need to identify which users can install apps from the Microsoft for Business private store.

  Which users should you identify?

  A. User1, User2, User3, User4, and User5

  B. User1 only

  C. User1 and User2 only

  D. User3 and User4 only

  E. User1, User2, User3, and User4 only

  Correct Answer: C

  Allow users to shop controls the shopping experience in Microsoft Store for Education. When this setting is on, Purchasers and Basic Purchasers can purchase products and services from Microsoft Store for Education.

  References: https://docs.microsoft.com/en-us/microsoft-store/acquire-apps-microsoft-store-for-business

• Question 260:

  You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

  In the tenant, you create a user named User1.

  You need to ensure that User1 can publish retention labels from the Security and Compliance admin center.

  The solution must use the principle of least privilege.

  To which role group should you add User1?

  A. Security Administrator

  B. Records Management

  C. Compliance Administrator

  D. eDiscovery Manager

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/file-plan-manager