Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 261:

  You have a Microsoft 365 subscription.

  You recently configured a Microsoft SharePoint Online tenant in the subscription.

  You plan to create an alert policy.

  You need to ensure that an alert is generated only when malware is detected in more than five documents stored in SharePoint Online during a period of 10 minutes.

  What should you do first?

  A. Enable Microsoft Office 365 Cloud App Security.

  B. Deploy Windows Defender Advanced Threat Protection (Windows Defender ATP)

  C. Enable Microsoft Office 365 Analytics.

  Correct Answer: B

  https://docs.microsoft.com/en-us/cloud-app-security/use-case-admin- quarantine

• Question 262:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

  Solution: From the Azure Active Directory admin center, you create a trusted location and a conditional access policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  This solution applies to users accessing Azure Active Directory, not to users accessing SharePoint Online. Conditional Access in SharePoint Online can be configured to use an IP Address white list to allow access.

  References: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition https://techcommunity.microsoft.com/t5/Microsoft-SharePoint-Blog/Conditional-Access-in-SharePoint- Online-and-OneDrive-for/ba-p/46678

• Question 263:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

  Solution: From the Device Management admin center, you create a trusted location and a compliance policy

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Conditional Access in SharePoint Online can be configured to use an IP Address white list to allow access.

  References:

  https://techcommunity.microsoft.com/t5/Microsoft-SharePoint-Blog/Conditional-Access-in-SharePoint- Online-and-OneDrive-for/ba-p/46678

• Question 264:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

  Solution: From the Microsoft 365 admin center, you configure the Organization profile settings.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Conditional Access in SharePoint Online can be configured to use an IP Address white list to allow access.

  References:

  https://techcommunity.microsoft.com/t5/Microsoft-SharePoint-Blog/Conditional-Access-in-SharePoint- Online-and-OneDrive-for/ba-p/46678A

• Question 265:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  From the Security and Compliance admin center, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group.

  You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States.

  Solution: From Windows PowerShell, you run the New-ComplianceSecurityFilter cmdlet with the appropriate parameters.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/permissions-filtering-for-content-search https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance-content-search/new-compliancesecurityfilter?view=exchange-ps

• Question 266:

  You have a Microsoft 365 subscription.

  From the Security and Compliance admin center, you create a content search of all the mailboxes that contain the work ProjectX.

  You need to export the results of the content search.

  What do you need to download the report?

  A. a certification authority (CA) certificate

  B. an export key

  C. a password

  D. a user certificate

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/export-search-results

• Question 267:

  Your company uses on-premises Windows Server File Classification Infrastructure (FCI). Some documents on the on-premises file servers are classified as Confidential.

  You migrate the files from the on-premises file servers to Microsoft SharePoint Online.

  You need to ensure that you can implement data loss prevention (DLP) policies for the uploaded file based on the Confidential classification.

  What should you do first?

  A. From the SharePoint admin center, configure hybrid search.

  B. From the SharePoint admin center, create a managed property.

  C. From the Security and Compliance Center PowerShell, run the New-DataClassification cmdlet.

  D. From the Security and Compliance Center PowerShell, run the New-DlpComplianceRule cmdlet.

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance-dlp/new-dataclassification?view=exchange-ps

• Question 268:

  You have a Microsoft 365 subscription.

  All users have their email stored in Microsoft Exchange Online.

  In the mailbox of a user named User1, you need to preserve a copy of all the email messages that contain the word ProjectX.

  What should you do?

  A. From the Security and Compliance admin center, create a data loss prevention (DLP) policy.

  B. From the Security and Compliance admin center, create a label and label policy.

  C. From the Security and Compliance admin center, create, create a label and a label policy.

  D. From the Security and Compliance admin center, start a message trace.

  E. From the Exchange admin center, start a mail flow message trace

  Correct Answer: A

  A DLP policy contains a few basic things:

  Where to protect the content: locations such as Exchange Online, SharePoint Online, and OneDrive for Business sites, as well as Microsoft Teams chat and channel messages.

  When and how to protect the content by enforcing rules comprised of:

  Conditions the content must match before the rule is enforced. For example, a rule might be configured to look only for content containing Social Security numbers that's been shared with people outside your organization.

  Actions that you want the rule to take automatically when content matching the conditions is found. For example, a rule might be configured to block access to a document and send both the user and compliance officer an email notification.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies

• Question 269:

  You have a Microsoft 365 subscription.

  You configure a data loss prevention (DLP) policy.

  You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.

  You need to prevent the users from bypassing the DLP policy. What should you configure?

  A. incident reports

  B. actions

  C. exceptions

  D. user overrides

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

• Question 270:

  You have a Microsoft 365 subscription.

  All users are assigned a Microsoft 365 E3 license.

  You enable auditing for your organization.

  What is the maximum amount of time data will be retained in the Microsoft 365 audit log?

  A. 2 years

  B. 1 year

  C. 30 days

  D. 90 days

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance