[2023] MS-101 PDF Questions - Perfect Prospect To Go With Exams4sures Practice Exam
Microsoft MS-101 Pdf Questions - Outstanding Practice To your Exam
NEW QUESTION # 221
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
Your company implements Windows Information Protection (WIP).
You need to modify which users and applications are affected by WIP.
What should you do? To answer, select the appropriate options m the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea
NEW QUESTION # 222
Your network contains an Active Directory domain named contoso.com. The domain contains the file servers shown in the following table.
A file named File1.abc is stored on Server1. A file named File2.abc is stored on Server2. Three apps named App1, App2, and App3 all open files that have the .abc file extension.
You implement Windows Information Protection (WIP) by using the following configurations:
* Exempt apps: App2
* Protected apps: App1
* Windows Information Protection mode: Block
* Network boundary: IPv4 range of: 192.168.1.1-192.168-1.255
You need to identify the apps from which you can open File1.abc.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea
NEW QUESTION # 223
You have a Microsoft 365 E5 tenant.
You need to implement compliance solutions that meet the following requirements:
* Use a file plan to manage retention labels.
* Identify, monitor, and automatically protect sensitive information.
* Capture employee communications for examination by designated reviewers.
Answer:
Explanation:
NEW QUESTION # 224
You have a Microsoft 365 subscription.
You need to implement Windows Defender Advanced Threat Protection (ATP) for all the supported devices enrolled in mobile device management (MDM).
What should you include in the device configuration profile? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/intune/advanced-threat-protection
NEW QUESTION # 225
You have a Microsoft 365 subscription.
You need to view the IP address from which a user synced a Microsoft SharePoint Online library.
What should you do?
- A. From the SharePoint Online admin center, view the usage reports.
- B. From the Microsoft 365 admin center, view the usage reports.
- C. From the Security & Compliance admin center, perform an audit log search.
- D. From the Microsoft 365 admin center, view the properties of the user's user account.
Answer: C
Explanation:
Section: [none]
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance
NEW QUESTION # 226
Your company uses Microsoft Azure Advanced Threat Protection (ATP) and Windows Defender ATP.
You need to integrate Windows Defender ATP and Azure ATP.
What should you do?
- A. From Windows Defender Security Center, configure the Machine management settings.
- B. From Azure ATP, configure the notifications and reports.
- C. From Windows Defender Security Center, configure the General settings.
- D. From Azure ATP, configure the data sources.
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/integrate-wd-atp
NEW QUESTION # 227
Your company has a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com. The company stores 2 TBs of data in SharePoint Online document libraries. The tenant has the labels shown in the following table.
Answer:
Explanation:
NEW QUESTION # 228
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it As a result these questions will not appear In the review screen.
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You create an Azure Advanced Threat Protection (ATP) workspace named Workspace1.
The tenant contains users shown in the following table.
You need to modify the configuration of the Azure ATP sensors.
Solution: You instruct User1 to modify the Azure ATP sensor configuration.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Explanation
Only Azure ATP administrators can modify the sensors.
References:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-role-groups
NEW QUESTION # 229
You deploy Microsoft Azure Information Protection.
You need to ensure that a security administrator named SecAdmin1 can always read and inspect data protected by Azure Rights Management (Azure RMS).
What should you do?
- A. From the Azure Active Directory admin center, add SecAdmin1 to the Security Reader role group.
- B. From Windows PowerShell, enable the super user feature and assign the role to SecAdmin1.
- C. From the Security & Compliance admin center, add SecAdmin1 to the Compliance Administrator role group.
- D. From the Security & Compliance admin center, add SecAdmin1 to the eDiscovery Manager role group.
Answer: B
Explanation:
The super user feature of the Azure Rights Management service from Azure Information Protection ensures that authorized people and services can always read and inspect the data that Azure Rights Management protects for your organization. However, the super user feature is not enabled by default. The PowerShell cmdlet Enable-AadrmSuperUserFeature is used to manually enable the super user feature.
References:
https://docs.microsoft.com/en-us/azure/information-protection/configure-super-users
NEW QUESTION # 230
Your company has a Microsoft 365 subscription that contains the domains shown in the following table.
The company plans to add a custom domain named fabrikam.com to the subscription and then to enable enrollment of devices to Intune by using auto discovery for Tabrikam.com.
You need to add a DNS record to the fabrikam.com zone.
Which record type should you use for the new record?
- A. PTR
- B. TXT
- C. SRV
- D. CNAME
Answer: B
NEW QUESTION # 231
You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide#using-a-retention-label-as-a-condition-in-a-dlp-policy
NEW QUESTION # 232
You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide
NEW QUESTION # 233
You configure a conditional access policy. The locations settings are configured as shown in the Locations exhibit. (Click the Locations tab.)
The users and groups settings are configured as shown in the Users and Groups exhibit. (Click Users and Groups tab.)
Members of the Security reader group report that they cannot sign in to Microsoft Active Directory (Azure AD) on their device while they are in the office.
You need to ensure that the members of the Security reader group can sign in in to Azure AD on their device while they are in the office. The solution must use the principle of least privilege.
What should you do?
- A. From the Intune admin center, create a device compliance policy.
- B. From the Azure Active Directory admin center, create a named location.
- C. From the conditional access policy, configure the device state.
- D. From the Azure Active Directory admin center, create a custom control.
Answer: B
Explanation:
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition
NEW QUESTION # 234
You have several devices enrolled in Microsoft Intune.
You have a Microsoft Azure Active Directory (Azure AD) tenant that includes the users shown in the following table.
The device type restrictions in Intune are configured as shown in the following table.
You add User3 as a device enrollment manager in Intune.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
No
Yes
No
NEW QUESTION # 235
Your company uses Microsoft Azure Advanced Threat Protection (ATP) and Microsoft Defender ATP.
You need to integrate Microsoft Defender ATP and Azure ATP.
What should you do?
- A. From Microsoft Defender Security Center, configure the General settings.
- B. From Azure ATP, configure the notifications and reports.
- C. From Microsoft Defender Security Center, configure the Machine management settings.
- D. From Azure ATP, configure the data sources.
Answer: D
Explanation:
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/integrate-wd-atp Implement Microsoft 365 security and threat management Testlet 2 Case Study Overview Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
The company has the employees and devices shown in the following table.
Contoso recently purchased a Microsoft 365 E5 subscription.
Existing Environment
The network contains an on-premises Active Directory forest named contoso.com. The forest contains the servers shown in the following table.
All servers run Windows Server 2016. All desktops and laptops run Windows 10 Enterprise and are joined to the domain.
The mobile devices of the users in the Montreal and Seattle offices run Android. The mobile devices of the users in the New York office run iOS.
The domain is synced to Azure Active Directory (Azure AD) and includes the users shown in the following table.
The domain also includes a group named Group1.
Requirements
Planned Changes
Contoso plans to implement the following changes:
* Implement Microsoft 365.
* Manage devices by using Microsoft Intune.
* Implement Azure Advanced Threat Protection (ATP).
* Every September, apply the latest feature updates to all Windows computers. Every March, apply the latest feature updates to the computers in the New York office only.
Technical Requirements
Contoso identifies the following technical requirements:
* When a Windows 10 device is joined to Azure AD, the device must enroll in Intune automatically.
* Dedicated support technicians must enroll all the Montreal office mobile devices in Intune.
* User1 must be able to enroll all the New York office mobile devices in Intune.
* Azure ATP sensors must be installed and must NOT use port mirroring.
* Whenever possible, the principle of least privilege must be used.
* A Microsoft Store for Business must be created.
Compliance Requirements
Contoso identifies the following compliance requirements:
* Ensure that the users in Group1 can only access Microsoft Exchange Online from devices that are enrolled in Intune and configured in accordance with the corporate policy.
* Configure Windows Information Protection (WIP) for the Windows 10 devices.
NEW QUESTION # 236
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You sign for Microsoft Store for Business.
The tenant contains the users shown in the following table.
Microsoft Store for Business has the following Shopping behavior settings:
* Allow users to shop is set to On
* Make everyone a Basic Purchaser is set to Off
You need to identify which users can install apps from the Microsoft for Business private store.
Which users should you identify?
- A. User1, User2, User3, and User4 only
- B. User1 and User2 only
- C. User1 only
- D. User1, User2, User3, User4, and User5
- E. User3 and User4 only
Answer: B
Explanation:
Explanation
Allow users to shop controls the shopping experience in Microsoft Store for Education. When this setting is on, Purchasers and Basic Purchasers can purchase products and services from Microsoft Store for Education.
References:
https://docs.microsoft.com/en-us/microsoft-store/acquire-apps-microsoft-store-for-business
NEW QUESTION # 237
HOTSPOT
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You have three applications named App1, App2, and App3. The apps use files that have the same file extensions.
Your company uses Windows Information Protection (WIP). WIP has the following configurations:
* Windows Information Protection mode: Silent
* Protected apps: App1
* Exempt apps: App2
From App1, you create a file named File1.
What is the effect of the configurations? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/ create-wip-policy-using-intune-azure
NEW QUESTION # 238
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.
You enroll all the computers in Upgrade Readiness.
You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.
Solution: You set the ReadyForWindows status of App1 to Highly adopted.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
App1 has a "low install count" (2% or less) so will be Ready to upgrade. We need to change the setting for App2.
Reference:
https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-identify-apps
NEW QUESTION # 239
You use Windows Defender Advanced Threat Protection (Windows Defender ATP).
You have the Windows Defender ATP machine groups shown in the following table.
You plan to onboard computers to Windows Defender ATP as shown in the following table.
To which machine group will each computer be added? To answer, select the appropriate options in the answer are.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 240
You have a Microsoft 365 tenant named contoso.com. The tenant contains the users shown in the following table.
You have the eDiscovery cases shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/assign-ediscovery-permissions
NEW QUESTION # 241
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You have three applications named App1, App2, and App3 that have the same file format.
Your company uses Windows Information Protection (WIP). WIP has the following configurations:
Windows Information Protection mode: Silent
Protected apps: App1
Exempt apps: App2
From App1, you create a file named File1.
What is the effect of the configurations? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 242
Your company has a Microsoft 365 subscription.
You need to configure Microsoft 365 to meet the following requirements:
* Malware found in email attachments must be quarantined for 20 days.
* The email address of senders to your company must be verified.
Which two options should you configure in the Security & Compliance admin center? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 243
You have a new Microsoft 365 subscription.
A user named User1 has a mailbox in Microsoft Exchange Online.
You need to log any changes to the mailbox folder permissions of User1.
Which command should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
To enable auditing for a single mailbox (in this example, belonging to Holly Sharp), use this PowerShell command: Set-Mailbox username -AuditEnabled $true References:
https://support.microsoft.com/en-us/help/4026501/office-auditing-in-office-365-for-admins
https://docs.microsoft.com/en-us/powershell/module/exchange/mailboxes/set-mailbox?view=exchange-ps
NEW QUESTION # 244
......
Online Questions - Outstanding Practice To your MS-101 Exam: https://www.exams4sures.com/Microsoft/MS-101-practice-exam-dumps.html
Practice To MS-101 - Exams4sures Remarkable Practice On your Microsoft 365 Mobility and Security Exam: https://drive.google.com/open?id=18gOydnBZcPi0WAd0vFmOys0JF6zB6JtG