Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 331:

  DRAG DROP

  Your company purchases a cloud app named App1.

  You need to ensure that you can use Microsoft Cloud App Security to block downloads in App1. App1 supports session controls.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/cloud-app-security/getting-started-with-cloud-app-security

• Question 332:

  DRAG DROP

  You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

  You need to automatically label the documents on Site1 that contain credit card numbers.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide#what-label-policies-can-do https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

• Question 333:

  DRAG DROP

  You create a Microsoft 365 subscription.

  You need to create a deployment plan for Microsoft Defender for Identity.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/defender-for-identity/install-step1 https://docs.microsoft.com/en-us/defender-for-identity/install-step3 https://docs.microsoft.com/en-us/defender-for-identity/install-step4

• Question 334:

  DRAG DROP

  You have a Microsoft 365 subscription.

  You have the devices shown in the following table.

  

  You plan to join the devices to Azure Active Directory (Azure AD)

  What should you do on each device to support Azure AU join? To answer, drag the appropriate actions to the collect devices, Each action may be used once, more than once, of not at all. You may need to drag the split bar between panes or

  scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 335:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You need to implement Windows Defender Advanced Threat Protection (ATP) for all the supported devices enrolled in mobile device management (MDM).

  What should you include in the device configuration profile? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/intune/advanced-threat-protection

• Question 336:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You have a group named Support. Users in the Support group frequently send email messages to external users.

  The manager of the Support group wants to randomly review messages that contain attachments.

  You need to provide the manager with the ability to review messages that contain attachments sent from the Support group users to external users. The manager must have access to only 10 percent of the messages.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/supervision-policies

• Question 337:

  HOTSPOT

  You plan to allow users from the engineering department to enroll their mobile device in mobile device management (MDM).

  The device type restrictions are configured as shown in the following table.

  

  The device limit restrictions are configured as shown in the following table.

  

  What is the effective configuration for the members of the Engineering group? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 338:

  HOTSPOT

  You have a data loss prevention (DLP) policy.

  You need to increase the likelihood that the DLP policy will apply to data that contains medical terms from the International Classification of Diseases (ICD-9-CM). The solution must minimize the number of false positives.

  Which two settings should you modify? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies https://docs.microsoft.com/en-us/office365/securitycompliance/what-the-sensitive-information-types-look-for#international-classification-of-diseases-icd-9-cm

• Question 339:

  HOTSPOT

  You have a Microsoft Azure Activity Directory (Azure AD) tenant contains the users shown in the following table.

  

  Group3 is a member of Group1.

  Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP contains the roles shown in the following table.

  

  Windows Defender ATP contains the device groups shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection

• Question 340:

  HOTSPOT

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

  You have three applications named App1, App2, and App3 that have the same file extensions.

  Your company uses Windows Information Protection (WIP). WIP has the following configurations:

  1.

  Windows Information Protection mode: Silent

  2.

  Protected apps: App1

  3.

  Exempt apps: App2

  From App1, you create a file named File1.

  What is the effect of the configurations? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure