Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 341:

  HOTSPOT

  You have several devices enrolled in Microsoft Intune.

  You have a Microsoft Azure Active Directory (Azure AD) tenant that includes the users shown in the following table.

  

  The device limit restrictions in Intune are configured as shown in the following table.

  

  You add User3 as a device enrollment manager in Intune.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/intune/device-enrollment-manager-enroll

• Question 342:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains the file servers shown in the following table.

  

  A file named File1.abc is stored on Server1. A file named File2.abc is stored on Server2. Three apps named App1, App2, and App3 all open files that have the .abc file extension. You implement Windows Information Protection (WIP) by using the following configurations:

  1.

  Exempt apps: App2

  2.

  Protected apps: App1

  3.

  Windows Information Protection mode: Block

  4.

  Network boundary: IPv4 range of: 192.168.1.1-192.168.1.255

  You need to identify the apps from which you can open File1.abc.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure

• Question 343:

  HOTSPOT

  You have a document in Microsoft OneDrive that is encrypted by using Microsoft Azure Information Protection as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-protection

• Question 344:

  HOTSPOT

  You have several devices enrolled in Microsoft Intune.

  You have a Microsoft Azure Active Directory (Azure AD) tenant that includes the users shown in the following table.

  

  The device type restrictions in Intune are configured as shown in the following table.

  

  You add User3 as a device enrollment manager in Intune.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1:

  No. User1 is in Group1. The two device type policies that apply to Group1 are Policy3 and the Default (All Users) policy. However, Policy3 has a higher priority than the default policy so Policy3 is the only effective policy. Policy3 allows the

  enrolment of Android and iOS devices only, not Windows.

  Box 2:

  No. User2 is in Group1 and Group2. The device type policies that apply to Group1 and Group2 are Policy2, Policy3 and the Default (All Users) policy. However, Policy2 has a higher priority than Policy 3 and the default policy so Policy2 is the

  only effective policy. Policy2 allows the enrolment of Windows devices only, not Android.

  Box 3:

  Yes. User3 is a device enrollment manager. Device restrictions to not apply to a device enrollment manager.

  Reference:

  https://docs.microsoft.com/en-us/intune/enrollment/enrollment-restrictions-set

• Question 345:

  HOTSPOT

  Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP contains the device groups shown in the following table.

  

  You onboard computers to Windows Defender ATP as shown in the following table.

  

  Of which groups are Computer1 and Computer2 members? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 346:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You are configuring permissions for Security and Compliance.

  You need to ensure that the users can perform the tasks shown in the following table.

  

  The solution must use the principle of least privilege.

  To which role should you assign each user? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/permissions-in-the-security-and-compliance-center#mapping-of-role-groups-to-assigned-roles

• Question 347:

  HOTSPOT

  You have a Microsoft 365 subscription that contains all the user data.

  You plan to create the retention policy shown in the Locations exhibit. (Click the Locations tab.)

  

  You configure the Advanced retention settings as shown in the Retention exhibit. (Click the Retention tab.)

  

  The locations specified in the policy include the groups shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Distribution lists and mail-enabled security groups will be expanded so the policy will apply to all the mailboxes in the group. Only the mailboxes that are currently members of these groups will be covered by the policy. Mailboxes added to

  these groups later won't be covered, but ones that are removed later will still be covered.

  References:

  https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies

• Question 348:

  HOTSPOT

  You have the Microsoft Azure Active Directory (Azure AD) users shown in the following table.

  

  Your company uses Microsoft Intune.

  Several devices are enrolled in Intune as shown in the following table.

  

  The device compliance policies in Intune are configured as shown in the following table.

  

  You create a conditional access policy that has the following settings: The Assignments settings are configured as follows:

  1.

  Users and groups: Group1

  2.

  Cloud apps: Microsoft Office 365 Exchange Online

  3.

  Conditions: Include All device state, exclude Device marked as compliant

  4.

  Access controls is set to Block access.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 349:

  HOTSPOT

  You have a new Microsoft 365 subscription.

  A user named User1 has a mailbox in Microsoft Exchange Online.

  You need to log any changes to the mailbox folder permissions of User1.

  Which command should you run? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  To enable auditing for a single mailbox (in this example, belonging to Holly Sharp), use this PowerShell command: Set-Mailbox username -AuditEnabled $true

  References: https://support.microsoft.com/en-us/help/4026501/office-auditing-in-office-365-for-admins https://docs.microsoft.com/en-us/powershell/module/exchange/mailboxes/set-mailbox?view=exchange-ps

• Question 350:

  HOTSPOT

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

  Your company implements Windows Information Protection (WIP).

  You need to modify which users and applications are affected by WIP.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure