Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 51:

  You have a Microsoft 365 subscription. You have a user named User1. You need to ensure that Used can place a hold on all mailbox content. What permission should you assign to User1?

  A. the Information Protection administrator ide from the Azure Active Directory admin center.

  B. the eDiscovery Manager tote from the Microsoft 365 compliance center.

  C. the Compliance Management role from the Exchange admin center.

  D. the User management administrator role from the Microsoft 365 admin center.

  Correct Answer: B

• Question 52:

  You have a Microsoft Azure Active Directory (Azure AD) tenant named Contoso.com.

  You create a Microsoft Defender for identity instance Contoso.

  The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Defender for identify sensors.

  Solutions: You instruct User1 to modify the Defender for identity sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 53:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  From the Microsoft 365 Defender, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group.

  You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States.

  Solution: From the Microsoft 365 Defender, you modify the roles of the US eDiscovery Managers role group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 54:

  You have a Microsoft 365 E5 subscription.

  You plan to implement records management and enable users to designate documents as regulatory records.

  You need to ensure that the option to mark content as a regulatory record is visible when you create retention labels.

  What should you do first?

  A. Configure custom detection rules.

  B. Create an Exact Data Match (EDM) schema.

  C. Run the Set-RegulatoryComplianceUI cmdlet.

  D. Run the Set-LabelPolicy cmdlet.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/declare-records?view=o365-worldwide

• Question 55:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the Exchange admin role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to assign the Security Administrator role.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide

• Question 56:

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  You need to configure an incident email notification rule that will be triggered when an alert occurs only on a Windows 10 device. The solution must minimize administrative effort. What should you do first?

  A. From the Microsoft 365 admin center, create a mail-enabled security group.

  B. From the Microsoft 365 Defender portal, create a device group.

  C. From the Microsoft Endpoint Manager admin center, create a device category.

  D. From the Azure Active Directory admin center, create a dynamic device group.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-email-notifications?view=o365-worldwide

• Question 57:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  You need to enable User1 to create Compliance Manager assessments.

  Solution: From the Microsoft 365 compliance center, you add User1 to the Compliance Manager Assessors role group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center.md

• Question 58:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  You need to enable User1 to create Compliance Manager assessments.

  Solution: From the Microsoft 365 admin center, you assign User1 the Compliance admin role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center.md

• Question 59:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  You need to enable User1 to create Compliance Manager assessments.

  Solution: From the Microsoft 365 admin center, you assign User1 the Compliance data admin role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center.md

• Question 60:

  You have a Microsoft 365 tenant.

  You plan to implement Endpoint Protection device configuration profiles.

  Which platform can you manage by using the profiles?

  A. Ubuntu Linux

  B. macOS

  C. iOS

  D. Android

  Correct Answer: B

  Intune device configuration profiles can be applied to Windows 10 devices and macOS devices

  Note:

  There are several versions of this question in the exam. The question has two possible correct answers:

  Windows 10

  macOS

  Other incorrect answer options you may see on the exam include the following:

  Android Enterprise

  Windows 8.1

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-configure