Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 151:

  You have a Microsoft 365 E5 tenant.

  You plan to deploy a monitoring solution that meets the following requirements:

  Captures Microsoft Teams channel messages that contain threatening or violent language.

  Alerts a reviewer when a threatening or violent message is identified.

  What should you include in the solution?

  A. Data Subject Requests (DSRs)

  B. Insider risk management policies

  C. Communication compliance policies

  D. Audit log retention policies

  Correct Answer: C

• Question 152:

  You have a Microsoft 365 E5 subscription.

  You plan to implement Microsoft Purview policies to meet the following requirements:

  Identify documents that are stored in Microsoft Teams and SharePoint that contain Personally Identifiable Information (PII).

  Report on shared documents that contain PII.

  What should you create?

  A. a data loss prevention (DLP) policy

  B. a retention policy

  C. an alert policy

  D. a Microsoft Defender for Cloud Apps policy

  Correct Answer: A

  Demonstrate data protection

  Protection of personal information in Microsoft 365 includes using data loss prevention (DLP) capabilities. With DLP policies, you can automatically protect sensitive information across Microsoft 365.

  There are multiple ways you can apply the protection. Educating and raising awareness to where EU resident data is stored in your environment and how your employees are permitted to handle it represents one level of information protection

  using Office 365 DLP.

  In this phase, you create a new DLP policy and demonstrate how it gets applied to the IBANs.docx file you stored in SharePoint Online in Phase 2 and when you attempt to send an email containing IBANs.

  From the Security and Compliance tab of your browser, click Home.

  Click Data loss prevention > Policy.

  Click + Create a policy.

  In Start with a template or create a custom policy, click Custom > Custom policy > Next.

  In Name your policy, provide the following details and then click Next: a. Name:

  EU Citizen PII Policy b. Description: Protect the personally identifiable information of European citizens

  Etc.

  Reference:

  https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-discovery-protection- reporting-in-office365-dev-test-environment

• Question 153:

  You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.

  

  You plan to implement attack surface reduction (ASR) rules. Which devices will support the ASR rules?

  A. Device 1, Device2, and Device3 only

  B. Device3 only

  C. Device2 and Device3 only

  D. Device1, Device2, Devices and Device4

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-attack- surface-reduction?view=o365-worldwide#requirements

• Question 154:

  You have a Microsoft Azure Active Directory (Azure AD) tenant named Contoso.com.

  You create a Microsoft Defender for identity instance Contoso.

  The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Defender for identify sensors.

  Solutions: You instruct User1 to modify the Defender for identity sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 155:

  You have a Microsoft 365 tenant that contains 500 Windows 10 devices and a Microsoft Endpoint Manager device compliance policy.

  You need to ensure that only devices marked as compliant can access Microsoft Office 365 apps.

  Which policy type should you configure?

  A. conditional access

  B. account protection

  C. attack surface reduction (ASR)

  D. Endpoint detection and response

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 156:

  You have a Microsoft 365 E5 subscription that uses Azure Advanced Threat Protection (ATP).

  You need to create a detection exclusion in Azure ATP.

  Which tool should you use?

  A. the Security and Compliance admin center

  B. Microsoft Defender Security Center

  C. the Microsoft 365 admin center

  D. the Azure Advanced Threat Protection portal

  E. the Cloud App Security portal

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is https://docs.microsoft.com/en-us/defender-for-identity/excluding-entities-from-detections

• Question 157:

  You implement Microsoft Azure Advanced Threat Protection (Azure ATP). You have an Azure ATP sensor configured as shown in the following exhibit.

  

  How long after the Azure ATP cloud service is updated will the sensor update?

  A. 20 hours

  B. 12 hours

  C. 7 hours

  D. 48 hours

  Correct Answer: B

• Question 158:

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You copy the Group Policy Administrative Templates from a Windows 10 computer to Server1.

  Does this meet the goal?

  A. yes

  B. No

  Correct Answer: A

• Question 159:

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You raise the forest functional level to Windows Server 2016. You copy the Group Policy Administrative Templates from a Windows 10 computer to the Netlogon share on all the domain controllers.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 160:

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You upgrade Server1 to Windows Server 2019.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A