Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 271:

  You have a Microsoft 365 subscription.

  You have a user named User1.

  You need to ensure that User1 can place a hold on all mailbox content.

  Which role should you assign to User1?

  A. eDiscovery Manager from the Security and Compliance admin center

  B. compliance management from the Exchange admin center

  C. User management administrator from the Microsoft 365 admin center

  D. Information Protection administrator from the Azure Active Directory admin center

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/Exchange/permissions/feature-permissions/policy-and-compliance-permissions?view=exchserver-2019

• Question 272:

  You have a Microsoft 365 subscription.

  You plan to enable Microsoft Azure Information Protection.

  You need to ensure that only the members of a group named PilotUsers can protect content.

  What should you do?

  A. From the AADRM PowerShell module, run the Set-AadrmOnboardingControlPolicy cmdlet.

  B. From Azure Information Protection, create a policy.

  C. From the AADRM PowerShell module, run the Set-AadrmRoleBasedAdministrator cmdlet.

  D. From Azure Information Protection, configure the protection activation status.

  Correct Answer: B

  References: https://blogs.technet.microsoft.com/kemckinn/2018/05/17/creating-labels-for-azure-information-protection/

• Question 273:

  Your company has a Microsoft 365 subscription.

  You need to identify which users performed the following privileged administration tasks:

  1.

  Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint

  2.

  Opened a mailbox of which the user was not the owner

  3.

  Reset a user password What should you use?

  A. Microsoft Azure Activity Directory (Azure AD) audit logs

  B. Security and Compliance content search

  C. Microsoft Azure Activity Directory (Azure AD) sign-ins

  D. Security and Compliance audit log search

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/activity-logs-overview

• Question 274:

  You need to notify the manager of the human resources department when a user in the department shares a file or folder from the department's Microsoft SharePoint site. What should you do?

  A. From the Security and Compliance admin center, create an alert policy.

  B. From the SharePoint site, create an alert.

  C. From the SharePoint admin center, modify the sharing settings.

  D. From the Security and Compliance admin center, create a data loss prevention (DLP) policy.

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/create-activity-alerts

• Question 275:

  Your company has a Microsoft 365 tenant.

  The company sells products online and processes credit card information.

  You need to be notified if a file stored in Microsoft SharePoint Online contains credit card information. The file must be removed automatically from its current location until an administrator can review its contents.

  What should you use?

  A. a Security and Compliance data loss prevention (DLP) policy

  B. a Microsoft Cloud App Security access policy

  C. a Security and Compliance retention policy

  D. a Microsoft Cloud App Security file policy

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

• Question 276:

  From the Security and Compliance admin center, you create a content export as shown in the exhibit. (Click the Exhibit tab.)

  

  What will be excluded from the export?

  A. a 60-MB DOCX file

  B. a 5-MB MP3 file

  C. a 10-MB XLSX file

  D. a 5-KB RTF file

  E. an 80-MB PPTX file

  F. a 100-MB VSDX file

  Correct Answer: B

  Unrecognized file formats are excluded from the search.

  Incorrect answers:

  A: DOCX is a supported Microsoft PowerPoint file format.

  C: XLSX is a supported Microsoft Excel file format.

  D: RTF is a supported Rich Text File format.

  E: PPTX is a supported Microsoft PowerPoint file format.

  F: VSDX is a supported Microsoft Visio file format.

  Answer: B

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/export-a-content-search-report

• Question 277:

  You create a new Microsoft 365 subscription and assign Microsoft 365 E3 licenses to 100 users.

  From the Security and Compliance admin center, you enable auditing.

  You are planning the auditing strategy.

  Which three activities will be audited by default? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. An administrator creates a new Microsoft SharePoint site collection.

  B. An administrator creates a new mail flow rule.

  C. A user shares a Microsoft SharePoint folder with an external user.

  D. A user delegates permissions to their mailbox.

  E. A user purges messages from their mailbox.

  Correct Answer: ABC

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance?redirectSourcePath=%252farticle%252f0d4d0f35-390b-4518-800e-0c7ec95e946c

• Question 278:

  You deploy Microsoft Azure Information Protection.

  You need to ensure that a security administrator named SecAdmin1 can always read and inspect data protected by Azure Rights Management (Azure RMS).

  What should you do?

  A. From the Security and Compliance admin center, add User1 to the eDiscovery Manager role group.

  B. From the Azure Active Directory admin center, add User1 to the Security Reader role group.

  C. From the Security and Compliance admin center, add User1 to the Compliance Administrator role group.

  D. From Windows PowerShell, enable the super user feature and assign the role to SecAdmin1.

  Correct Answer: D

  The super user feature of the Azure Rights Management service from Azure Information Protection ensures that authorized people and services can always read and inspect the data that Azure Rights Management protects for your organization. However, the super user feature is not enabled by default. The PowerShell cmdlet Enable-AadrmSuperUserFeature is used to manually enable the super user feature.

  References: https://docs.microsoft.com/en-us/azure/information-protection/configure-super-users

• Question 279:

  You plan to use the Security and Compliance admin center to import several PST files into Microsoft 365 mailboxes. Which three actions should you perform before you import the data? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. From the Exchange admin center, create a public folder.

  B. Copy the PST files by using AzCopy.

  C. From the Exchange admin center, assign admin roles.

  D. From the Microsoft Azure portal, create a storage account that has a blob container.

  E. From the Microsoft 365 admin center, deploy an add-in.

  F. Create a mapping file that uses the CSV file format.

  Correct Answer: BCF

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/use-network-upload-to-import-pst-files

• Question 280:

  In Microsoft 365, you configure a data loss prevention (DLP) policy named Policy1. Policy1 detects the sharing of United States (US) bank account numbers in email messages and attachments. Policy1 is configured as shown in the exhibit. (Click the Exhibit tab.)

  

  You need to ensure that internal users can email documents that contain US bank account numbers to external users who have an email suffix of contoso.com. What should you configure?

  A. an exception

  B. an action

  C. a condition

  D. a group

  Correct Answer: A

  Editing Policy settings > +New Rule > Exceptions We won't apply this rule to content that matches any of these exceptions. > +Add an exception > [Dropdownbox] Except if the recipient domain is. ----------------------------- Except if recipient domain is Detects when content is sent in an email message to the recipient domains you specify.

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies#how-dlp-policies-work