Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 281:

  You have a Microsoft 365 subscription.

  You need to view the IP address from which a user synced a Microsoft SharePoint library.

  What should you do?

  A. From the SharePoint admin center, view the usage reports.

  B. From the Security and Compliance admin center, perform an audit log search.

  C. From the Microsoft 365 admin center, view the usage reports.

  D. From the Microsoft 365 admin center, view the properties of the user's user account.

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance

• Question 282:

  You are testing a data loss prevention (DLP) policy to protect the sharing of credit card information with external users.

  During testing, you discover that a user can share credit card information with external users by using email. However, the user is prevented from sharing files that contain credit card information by using Microsoft SharePoint Online.

  You need to prevent the user from sharing the credit card information by using email and SharePoint.

  What should you configure?

  A. the locations of the DLP policy

  B. the user overrides of the DLP policy rule

  C. the status of the DLP policy

  D. the conditions of the DLP policy rule

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

• Question 283:

  You have a Microsoft 365 subscription.

  You need to investigate user activity in Microsoft 365, including from where users signed in, which applications were used, and increases in activity during the past month. The solution must minimize administrative effort.

  Which admin center should you use?

  A. Azure ATP

  B. Security and Compliance

  C. Cloud App Security

  D. Flow

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance

• Question 284:

  Your company has a Microsoft 365 subscription.

  You implement Microsoft Azure Information Protection.

  You need to automatically protect email messages that contain the word Confidential in the subject line.

  What should you create?

  A. a mail flow rule from the Exchange admin center

  B. a message trace from the Security and Compliance admin center

  C. a supervision policy from the Security and Compliance admin center

  D. a sharing policy from the Exchange admin center

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/azure/information-protection/configure-exo-rules

• Question 285:

  The users at your company use Dropbox to store documents. The users access Dropbox by using the MyApps portal.

  You need to ensure that user access to Dropbox is authenticated by using a Microsoft 365 identity. The documents must be protected if the data is downloaded to an untrusted device.

  What should you do?

  A. From the Intune admin center, configure the Conditional access settings.

  B. From the Azure Active Directory admin center, configure the Organizational relationships settings.

  C. From the Azure Active Directory admin center, configure the Application proxy settings.

  D. From the Azure Active Directory admin center, configure the Devices settings.

  Correct Answer: B

• Question 286:

  You implement Microsoft Azure Advanced Threat Protection (Azure ATP). You have an Azure ATP sensor configured as shown in the following exhibit.

  

  How long after the Azure ATP cloud service is updated will the sensor update?

  A. 1 hour

  B. 12 hours

  C. 48 hours

  D. 7 days

  E. 72 hours

  Correct Answer: E

  The exhibit shows that the sensor is configure for Delayed update.

  Given the rapid speed of ongoing Azure ATP development and release updates, you may decide to define a subset group of

  your sensors as a delayed update ring, allowing for a gradual sensor update process. Azure ATP enables you to choose

  how your sensors are updated and set each sensor as a Delayed update candidate.

  Sensors not selected for delayed update are updated automatically, each time the Azure ATP service is updated. Sensors

  set to Delayed update are updated on a delay of 72 hours, following the official release of each service update.

  https://docs.microsoft.com/en-us/azure-advanced-threat-protection/sensor-update

• Question 287:

  Your network contains an on-premises Active Directory domain.

  Your company has a security policy that prevents additional software from being installed on domain controllers.

  You need to monitor a domain controller by using Microsoft Azure Advanced Threat Protection (ATP).

  What should you do? More than one answer choice may achieve the goal. Select the BEST answer.

  A. Deploy an Azure ATP sensor, and then configure port mirroring.

  B. Deploy an Azure ATP sensor, and then configure detections.

  C. Deploy an Azure ATP standalone sensor, and then configure detections.

  D. Deploy an Azure ATP standalone sensor, and then configure port mirroring.

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/azure-advanced-threat-protection/install-atp-step5

• Question 288:

  You have a Microsoft 365 subscription.

  Your company purchases a new financial application named App1.

  From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover that many applications have a low score because they are missing information about domain registration and consumer popularity.

  You need to prevent the missing information from affecting the score.

  What should you configure from the Cloud Discover settings?

  A. Organization details

  B. Default behavior

  C. Score metrics

  D. App tags

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/cloud-app-security/discovered-app-queries

• Question 289:

  Your company uses Microsoft Azure Advanced Threat Protection (ATP) and Windows Defender ATP.

  You need to integrate Windows Defender ATP and Azure ATP. What should you do?

  A. From Azure ATP, configure the notifications and reports.

  B. From Azure ATP, configure the data sources.

  C. From Windows Defender Security Center, configure the Machine management settings.

  D. From Windows Defender Security Center, configure the General settings.

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/azure-advanced-threat-protection/integrate-wd-atp

• Question 290:

  You have a Microsoft 365 subscription.

  You need to be notified if users receive email containing a file that has a virus.

  What should you do?

  A. From the Exchange admin center, create an in-place eDiscovery and hold.

  B. From the Security and Compliance admin center, create a safe attachments policy.

  C. From the Security and Compliance admin center, create a data loss prevention (DLP) policy.

  D. From the Security and Compliance admin center, create an alert policy.

  E. From the Exchange admin center, create a mail flow rule.evention (DLP) policy.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/alert-policies