Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 191:

  You create the planned DLP policies.

  You need to configure notifications to meet the technical requirements.

  What should you do?

  A. From the Microsoft 365 security center, configure an alert policy.

  B. From the Microsoft Endpoint Manager admin center, configure a custom notification.

  C. From the Microsoft 365 admin center, configure a Briefing email.

  D. From the Microsoft 365 compliance center, configure the Endpoint DLP settings.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-configure-view-alertspolicies?view=o365-worldwide

• Question 192:

  You need to create the DLP policy to meet the technical requirements. What should you configure first?

  A. sensitive info types

  B. the Insider risk management settings

  C. the event types

  D. the sensitivity labels

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-test-tune-dlppolicy?view=o365-worldwide

• Question 193:

  You need to meet the technical requirement for the EU PII data. What should you create?

  A. a retention policy from the Security and Compliance admin center.

  B. a retention policy from the Exchange admin center

  C. a data loss prevention (DLP) policy from the Exchange admin center

  D. a data loss prevention (DLP) policy from the Security and Compliance admin center

  Correct Answer: A

  References:

  https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies

  EU PII wants both documents and email message to be preserved so SandC Admin Center for Retention. If this was for Email only, this probably could have been done in EAC.

• Question 194:

  Which report should the New York office auditors view?

  A. DLP policy matches

  B. DLP false positives and overrides

  C. DLP incidents

  D. Top Senders and Recipients

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-preventionpolicies This report also shows policy matches over time, like the policy matches report. However, the policy matches report shows matches at a rule level; for example, if an email matched three different rules, the policy matches report shows three different line items. By contrast, the incidents report shows matches at an item level; for example, if an email matched three different rules, the incidents report shows a single line item for that piece of content.Because the report counts are aggregated differently, the policy matches report is better for identifying matches with specific rules and fine tuning DLP policies. The incidents report is better for identifying specific pieces of content that are problematic for your DLP policies.

• Question 195:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a

  correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure a pilot for co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Device1 has the Configuration Manager client installed so you can manage Device1 by using Configuration Manager. To manage Device1 by using Microsoft Intune, the device has to be enrolled in Microsoft Intune. In the Co-management Pilot configuration, you configure a Configuration Manager Device Collection that determines which devices are auto-enrolled in Microsoft Intune. You need to add Device1 to the Device Collection so that it auto-enrols in Microsoft Intune. You will then be able to manage Device1 using Microsoft Intune. Reference: https://docs.microsoft.com/enus/configmgr/comanage/how-to-enable

• Question 196:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a

  correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure a pilot for co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: You create a device configuration profile from the Device Management admin center.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  It looks like the given answer is correct. There is an on-premises Active Directory synced to Azure Active Directory (Azure AD) So the co-management path1 - Auto-enroll existing clients 1. Hybrid Azure AD 2. Client agent setting for hybrid Azure ADjoin

  3. Configure auto-enrollment of devices to Intune 4. Enable co-management in Configuration Manager https://docs.microsoft.com/enus/mem/configmgr/comanage/tutorial-co-manage-client

• Question 197:

  You need to create the Microsoft Store for Business. Which user can create the store?

  A. User2

  B. User3

  C. User4

  D. User5

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/microsoft-store/roles-and-permissions-microsoft-store-forbusiness

• Question 198:

  You need to meet the compliance requirements for the Windows 10 devices. What should you create from the Intune admin center?

  A. a device compliance policy

  B. a device configuration profile

  C. an application policy

  D. an app configuration policy

  Correct Answer: C

• Question 199:

  You need to ensure that the support technicians can meet the technical requirement for the Montreal office mobile devices. What is the minimum of dedicated support technicians required?

  A. 1

  B. 4

  C. 7

  D. 31

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/enroll-devices-with-deviceenrollment-manager

• Question 200:

  On which server should you install the Azure ATP sensor?

  A. Server 1

  B. Server 2

  C. Server 3

  D. Server 4

  E. Server 5

  Correct Answer: A

  References:

  https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-capacity-planning

  However, if the case study had required that the DCs can't have any s/w installed, then the answer would have been a standalone sensor on Server2. In this scenario, the given answer is correct. BTW, ATP now known as Defender for

  Identity.