Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 351:

  HOTSPOT

  You have three devices enrolled in Microsoft Intune as shown in the following table.

  

  The device compliance policies in Intune are configured as shown in the following table.

  

  The device compliance policies have the assignments shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 352:

  HOTSPOT

  Your company is based in the United Kingdom (UK).

  Users frequently handle data that contains Personally Identifiable Information (PII).

  You create a data loss prevention (DLP) policy that applies to users inside and outside the company. The policy is configured as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Allowed blocked, but the user can override the policy

  1.

  If a user attempts to upload a document to a Microsoft SharePoint site, and the document contains one UK passport number, the document will be: allowed Explanation:

  When setting the policy tips and notifications, the document won't be blocked, it just shows a policy tip, if you set up this policy yourself, you will see there are no (block) actions configured for this rule.

  2.

  If a user attempts to email 100 UK passport numbers to a user in the same company, the email message will be: blocked, but the user can override the policy https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

• Question 353:

  HOTSPOT

  Your network contains an Active Directory forest named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You use Microsoft System Center Configuration Manager (Current Branch) for device management.

  You have the Windows 10 devices shown in the following table.

  

  You configure Configuration Manager co-management as follows:

  Automatic enrollment in Intune: Pilot Pilot collection: Collection2 You configure co-management workloads as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 354:

  HOTSPOT

  You have three devices enrolled in Microsoft Intune as shown in the following table.

  

  The device compliance policies in Intune are configured as shown in the following table.

  

  The device compliance policies have the assignments shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 355:

  HOTSPOT

  You create two device compliance policies for Android devices as shown in the following table.

  

  You have the Android devices shown in the following table.

  

  The users belong to the groups shown in the following table.

  

  The users enroll their device in Microsoft Intune.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/intune-user-help/enroll-your-device-in-intune-android

• Question 356:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. All client devices run Windows 10 and are joined to the domain.

  You update the Windows 10 devices by using Windows Update for Business.

  What is the maximum amount of time you can defer Windows 10 updates? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wufb

• Question 357:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com that uses Microsoft System Center Configuration Manager (Current Branch).

  You have Windows 10 and Windows 8.1 devices.

  You need to ensure that you can analyze the upgrade readiness of all the Windows 8.1 devices and analyze the update compliance of all the Windows 10 devices.

  What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-get-started https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-get-started

• Question 358:

  HOTSPOT

  You have three devices enrolled in Microsoft Intune as shown in the following table.

  

  The device compliance policies in Intune are configured as shown in the following table.

  

  The device compliance policies have the assignments shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 359:

  HOTSPOT

  Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP includes the machine groups shown in the following table.

  

  You onboard a computer named computer1 to Windows Defender ATP as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  If a machine is also matched to other groups, it is added only to the highest ranked machine group. Part 1 answer should be - computer 1 will be a member of - Group 3 only. Because its the highest rank and the machine is part of adatum.com

  if you add the tag demo to computer 1. then the answer should be group 1 only. Because the machine is tagged "demo" and OS is windows 10.

  According to this article https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/machine-groups

• Question 360:

  HOTSPOT

  You have a Microsoft Azure Activity Directory (Azure AD) tenant contains the users shown in the following table.

  

  Group3 is a member of Group1.

  Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP contains the roles shown in the following table.

  

  Windows Defender ATP contains the device groups shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: