Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 291:

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains 1,000 Windows 10 devices.

  You perform a proof of concept (PoC) deployment of Windows Defender Advanced Threat Protection (ATP) for 10 test devices. During the onboarding process, you configure Windows Defender ATP-related data to be stored in the United

  States.

  You plan to onboard all the devices to Windows Defender ATP.

  You need to store the Windows Defender ATP data in Europe.

  What should you first?

  A. Create a workspace.

  B. Onboard a new device.

  C. Delete the workspace.

  D. Offboard the test devices.

  Correct Answer: D

• Question 292:

  Your company has five security information and event management (SIEM) appliances. The traffic logs from each appliance are saved to a file share named Logs.

  You need to analyze the traffic logs.

  What should you do from Microsoft Cloud App Security?

  A. Click Investigate, and then click Activity log.

  B. Click Control, and then click Policies. Create a file policy.

  C. Click Discover, and then click Create snapshot report.

  D. Click Investigate, and then click Files.

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/investigate-an-activity-in-office-365-cas

• Question 293:

  Your company has 5,000 Windows 10 devices. All the devices are protected by using Windows Defender Advanced Threat Protection (ATP).

  You need to view which Windows Defender ATP alert events have a high severity and occurred during the last seven days.

  What should you use in Windows Defender ATP?

  A. the threat intelligence API

  B. Automated investigations

  C. Threat analytics

  D. Advanced hunting

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/investigate-alerts-windows-defender-advanced-threat-protection https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection

• Question 294:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You discover that some external users accessed content on a Microsoft SharePoint site. You modify the SharePoint sharing policy to prevent sharing outside your organization.

  You need to be notified if the SharePoint sharing policy is modified in the future.

  Solution: From the SharePoint site, you create an alert.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 295:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You discover that some external users accessed content on a Microsoft SharePoint site. You modify the SharePoint sharing policy to prevent sharing outside your organization.

  You need to be notified if the SharePoint sharing policy is modified in the future.

  Solution: From the Security and Compliance admin center, you create a threat management policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  From the Security and Compliance admin center, Alerts, you create a new alert policy.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/alert-policies

• Question 296:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You discover that some external users accessed content on a Microsoft SharePoint site. You modify the SharePoint sharing policy to prevent sharing outside your organization.

  You need to be notified if the SharePoint sharing policy is modified in the future.

  Solution: From the SharePoint admin center, you modify the sharing settings.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 297:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are deploying Microsoft Intune.

  You successfully enroll Windows 10 devices in Intune.

  When you try to enroll an iOS device in Intune, you get an error.

  You need to ensure that you can enroll the iOS device in Intune.

  Solution: You configure the Mobility (MDM and MAM) settings.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 298:

  Your company has a Microsoft 365 E3 subscription.

  All devices run Windows 10 Pro and are joined to Microsoft Azure Active Directory (Azure AD).

  You need to change the edition of Windows 10 to Enterprise the next time users sign in to their computer. The solution must minimize downtime for the users.

  What should you use?

  A. Windows Autopilot

  B. Windows Update

  C. Subscription Activation

  D. an in-place upgrade

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot

• Question 299:

  You use Microsoft System Center Configuration Manager (Current Branch) to manage devices. Your company uses the following types of devices:

  1.

  Windows 10

  2.

  Windows 8.1

  3.

  Android

  4.

  iOS

  Which devices can be managed by using co-management?

  A. Windows 10 and Windows 8.1 only

  B. Windows 10, Android, and iOS only

  C. Windows 10 only

  D. Windows 10, Windows 8.1, Android, and iOS

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/sccm/core/plan-design/choose-a-device-management-solution#bkmk_intune

• Question 300:

  Your network contains an Active Directory domain named contoso.com. The domain contains 100 Windows 8.1 devices.

  You plan to deploy a custom Windows 10 Enterprise image to the Windows 8.1 devices.

  You need to recommend a Windows 10 deployment method.

  What should you recommend?

  A. a provisioning package

  B. an in-place upgrade

  C. wipe and load refresh

  D. Windows Autopilot

  Correct Answer: C

  In-place upgrade differs from computer refresh in that you cannot use a custom image to perform the in-place upgrade. In this article we will add a default Windows 10 image to the production deployment share specifically to perform an in-

  place upgrade.

  To complete a computer refresh you will: Back up data and settings locally, in a backup folder. Wipe the partition, except for the backup folder. Apply the new operating system image. Install other applications. Restore data and settings.

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/refresh-a-windows-7-computer-with-windows-10