Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 391:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You create a Microsoft Cloud App Security policy named Risk1 based on the Logon from a risky IP address template as shown in the following exhibit.

  

  You have two users named User1 and User2. Each user signs in to Microsoft SharePoint Online from a risky IP address 10 times within 24 hours.

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 392:

  HOTSPOT

  You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Using a retention label in a policy is only supported for items in SharePoint Online and OneDrive for Business.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide#using-a-retention-label-as-a-condition-in-a-dlp-policy

• Question 393:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You configure an Enrollment Status Page profile as shown in the following exhibit.

  

  You assign the policy to Group1.

  You purchase the devices shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enrollment-status

• Question 394:

  HOTSPOT

  You integrate Microsoft Intune and contoso.com as shown in the following exhibit.

  

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

  

  You purchase a Windows 10 device named Device1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll

• Question 395:

  HOTSPOT

  You have an Azure subscription and an on-premises Active Directory domain. The domain contains 50 computers that run Windows 10.

  You need to centrally monitor System log events from the computers.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-collect-windows-computer

• Question 396:

  HOTSPOT

  Your company has a Microsoft 36S subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com. The company stores 2 TBs of data in SharePoint Online document libraries.

  

  The tenant has the labels shown in the following table.

  From the Azure portal, you active unified labeling.

  For each of the following statements, select yes if the statement is true Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 397:

  HOTSPOT

  You have a Microsoft 365 tenant named contoso.com. The tenant contains the users shown in the following table.

  

  You have the eDiscovery cases shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/microsoft-365/compliance/assign-ediscovery-permissions

• Question 398:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the users in the following table.

  

  In Microsoft Endpoint Manager, you create two device type restrictions that have the settings shown in the following table.

  

  In Microsoft Endpoint Manager, you create three device limit restrictions that have the settings shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 399:

  HOTSPOT

  You have a Microsoft 365 subscription that links to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

  A user named User1 stores documents in Microsoft OneDrive.

  You need to place the contents of User1's OneDrive account on an eDiscovery hold.

  Which URL should you use for the eDiscovery hold? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-ediscovery-holds

• Question 400:

  HOTSPOT

  You have a Microsoft 365 E5 subscription linked to an Azure Active Directory (Azure AD) tenant. The tenant contains a group named Group1 and the users shown in the following table:

  

  The tenant has a conditional access policy that has the following configurations:

  Name: Policy1

  Assignments:

  Users and groups: Group1

  Cloud aps or actions: All cloud apps Access controls: Grant, require multi-factor authentication Enable policy: Report-only

  You set Enabled Security defaults to Yes for the tenant.

  For each of the following settings select Yes, if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Report-only mode is a new Conditional Access policy state that allows administrators to evaluate the impact of Conditional Access policies before enabling them in their environment. With the release of report-only mode:

  1.

  Conditional Access policies can be enabled in report-only mode.

  2.

  During sign-in, policies in report-only mode are evaluated but not enforced.

  3.

  Results are logged in the Conditional Access and Report-only tabs of the Sign-in log details.

  4.

  Customers with an Azure Monitor subscription can monitor the impact of their Conditional Access policies using the Conditional Access insights workbook.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-report-only