Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 31:

  You have a Microsoft Azure Active Directory (Azure AD) tenant named Contoso.com.

  You create a Microsoft Defender for identity instance Contoso.

  The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Defender for identify sensors.

  Solutions: You instruct User4 to modify the Defender for identity sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 32:

  You have a Microsoft 365 subscription.

  You need to configure a compliance solution that meets the following requirements:

  Defines sensitive data based on existing data samples

  Automatically prevents data that matches the samples from being shared externally in Microsoft SharePoint or email messages

  Which two components should you configure? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a trainable classifier

  B. a sensitive info type

  C. an insider risk policy

  D. an adaptive policy scope

  E. a data loss prevention (DLP) policy

  Correct Answer: AE

  A: Classifiers This categorization method is well suited to content that isn't easily identified by either the manual or automated pattern-matching methods. This method of categorization is more about using a classifier to identify an item based on what the item is, not by elements that are in the item (pattern matching). A classifier learns how to identify a type of content by looking at hundreds of examples of the content you're interested in identifying.

  Where you can use classifiers Classifiers are available to use as a condition for: Office auto-labeling with sensitivity labels Auto-apply retention label policy based on a condition Communication compliance Sensitivity labels can use classifiers as conditions, see Apply a sensitivity label to content automatically. Data loss prevention

  E: Organizations have sensitive information under their control such as financial data, proprietary data, credit card numbers, health records, or social security numbers. To help protect this sensitive data and reduce risk, they need a way to

  prevent their users from inappropriately sharing it with people who shouldn't have it. This practice is called data loss prevention (DLP).

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/classifier-learn-about

  https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp

• Question 33:

  You have a Microsoft 365 subscription.

  You need to identify which administrative users performed eDiscovery searches during the past week.

  What should you do from the Security and Compliance admin center?

  A. Perform a content search

  B. Create a supervision policy

  C. Create an eDiscovery case

  D. Perform an audit log search

  Correct Answer: D

• Question 34:

  You have a computer that runs Windows 10.

  You need to verify which version of Windows 10 is installed.

  Solution: At a command prompt, you run the winver.exe command.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference:

  https://support.microsoft.com/en-us/windows/which-version-of-windows-operating-system- am-i-running-628bec99-476a-2c13-5296-9dd081cdd808

• Question 35:

  You have a Microsoft 365 E5 subscription.

  You define a retention label that has the following settings:

  Retention period 7 years

  Start the retention period bated on: When items were created

  You need to prevent the removal of the label once the label K applied to a lie What should you select in the retention label settings?

  A. Retain items even If users delete

  B. Mark items as a record

  C. Mark items as a regulatory record

  D. Retain items forever

  Correct Answer: C

• Question 36:

  You have a Microsoft 365 E5 tenant.

  You create a retention label named Retention1 as shown in the following exhibit.

  

  When users attempt to apply Retention1, the label is unavailable. You need to ensure that Retention1 is available to all the users. What should you do?

  A. Create a new label policy

  B. Modify the Authority type setting for Retention!

  C. Modify the Business function/department setting for Retention 1.

  D. Use a file plan CSV template to import Retention1.

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/create-apply-retention- labels?view=o365-worldwide

• Question 37:

  You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices:

  Windows 10 Android OS

  On which devices can you configure the Endpoint DLP policies?

  A. Windows 10 only

  B. Windows 10 and Android only

  C. Windows 10 and macO Sonly

  D. Windows 10, Android, and iOS

  Correct Answer: A

  A.Endpoint data loss prevention (Endpoint DLP) extends the activity monitoring and protection capabilities of DLP to sensitive items that are physically stored on Windows 10/11 and macOS (the three latest released major versions) devices. Once devices are onboarded into the Microsoft Purview solutions, the information about what users are doing with sensitive items is made visible in activity explorer. You can then enforce protective actions on those items via DLP policies.

  https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about

• Question 38:

  You have a Microsoft 365 subscription.

  You plan to implement Microsoft Purview Privileged Access Management.

  Which Microsoft Office 365 workloads support privileged access?

  A. Microsoft Exchange Online only

  B. Microsoft Teams only

  C. Microsoft Exchanqe Online and SharePoint Online only

  D. Microsoft Teams and SharePoint Online only

  E. Microsoft Teams, Exchanqe Online, and SharePoint Online

  Correct Answer: A

  Privileged access management Having standing access by some users to sensitive information or critical network configuration settings in Microsoft Exchange Online is a potential pathway for compromised accounts or internal threat activities. Microsoft Purview Privileged Access Management helps protect your organization from breaches and helps to meet compliance best practices by limiting standing access to sensitive data or access to critical configuration settings. Instead of administrators having constant access, just-in-time access rules are implemented for tasks that need elevated permissions. Enabling privileged access management for Exchange Online in Microsoft 365 allows your organization to operate with zero standing privileges and provide a layer of defense against standing administrative access vulnerabilities.

  Note: When will privileged access support Office 365 workloads beyond Exchange? Privileged access management will be available in other Office 365 workloads soon.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/privileged-access- management-solution-overview

  https://learn.microsoft.com/en-us/microsoft-365/compliance/privileged-access-management

• Question 39:

  You are reviewing alerts in the Microsoft 365 Defender portal. How long are the alerts retained in the portal?

  A. 30 days

  B. 60 days

  C. 3 months

  D. 6 months

  E. 12 months

  Correct Answer: D

• Question 40:

  You have a Microsoft 365 E5 tenant that contains four devices enrolled in Microsoft Intune as shown in the following table.

  

  You plan to deploy Microsoft 365 Apps for enterprise by using Microsoft Endpoint Manager. To which devices can you deploy Microsoft 365 Apps for enterprise?

  A. Device1 only

  B. Device1 and Device3 only

  C. Device2 and Device4 only

  D. Device1, Device2. and Device3 only

  E. Device1, Device2, Device3, and Device4

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-add