Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 441:

  HOTSPOT

  Your on-premises network contains an Active Directory domain and a Microsoft Endpoint Configuration Manager site.

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

  You use Azure AD Connect to sync user objects and group objects to Azure Directory (Azure AD) Password hash synchronization is disabled.

  You plan to implement co-management.

  You need to configure Azure AD Connect and the domain to support co-management.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 442:

  HOTSPOT

  You have a Microsoft 365 subscription that contains a Microsoft SharePoint Online site named Site1. Site1 has he files in the following table.

  

  The Site1 users are assigned the roles shown in the following table.

  

  You create a data less prevention (DLP) policy names Policy1 as shown in the following exhibit.

  

  How many files will be visible to user1 and User2 after Policy' is applied to answer, selected select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Recreated the scenario presented and User1 (Owner) can see:

  File1.docx, File4.bmp - normally

  File2.txt, File3.xlsx - with policy tip (-)Contains sensitive information

  File5.doc - with policy tip /!\ May contain sensitive information

  User 1 can see ALL 5 files.

  User 2 is added to the Visitors SharePoint group - this user is not an Owner nor Member.

  User 2 can see:

  File1.docx, File4.bmp normally

  File5.doc - with policy tip /!\ May contain sensitive information

  User2 can see 3 files.

• Question 443:

  HOTSPOT

  You have a Microsoft 365 E5 tenant

  You create a data toss prevention (DLP) policy to prevent users from using Microsoft Teams to share internal documents with external users.

  To which two locations should you apply the policy? To answer, select the appropriate locations in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 444:

  HOTSPOT

  You have three devices enrolled in Microsoft Endpoint Manager as shown in the following table.

  

  The device compliance policies in Endpoint Manager are configured as shown in the following table. The device compliance policies have the assignments shown in the following table.

  

  

  For each of the following statements, select Yes if the statement Is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 445:

  HOTSPOT

  You have three devices enrolled in Microsoft Endpoint Manager as shown in the following table.

  

  The device compliance policies in Endpoint Manager are configured as shown in the following table.

  

  The device compliance policies have the assignments shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 446:

  HOTSPOT

  Your company has a Microsoft 365 tenant

  You plan to allow users that are members of a group named Engineering to enroll their mobile device in mobile device management (MDM)

  The device type restriction are configured as shown in the following table.

  

  The device limit restriction are configured as shown in the following table.

  

  Hot Area:

  

  Correct Answer:

  

  https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set#change-enrollment-restriction-priority

• Question 447:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.

  You need to create a policy that will generate an email alert when a banned app is detected requesting permission to access user information or data in the subscription.

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 448:

  HOTSPOT

  You use Microsoft Defender for Endpoint.

  You have the Microsoft Defender for Endpoint device groups shown in the following table:

  

  You plan to onboard computers to Microsoft Defender for Endpoint as shown in the following table.

  Hot Area:

  

  Correct Answer:

  

• Question 449:

  HOTSPOT

  You need to ensure that User2 can review the audit logs. The solutions must meet the technical requirements.

  To which role group should you add User2, and what should you use?

  To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide

• Question 450:

  HOTSPOT

  You need to configure automatic enrollment in Intune. The solution must meet the technical requirements.

  What should you configure, and to which group should you assign the configurations?

  To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll