Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 321:

  DRAG DROP

  You create a Microsoft 36S subscription.

  You need to create a deployment plan for Microsoft Azure Advanced Threat Protection (ATP).

  Which five actions should you perform in sequence?

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/defender-for-identity/install-step1 https://docs.microsoft.com/en-us/defender-for-identity/install-step3 https://docs.microsoft.com/en-us/defender-for-identity/install-step4

• Question 322:

  DRAG DROP

  You have the Microsoft Azure Advanced Threat Protection (ATP) workspace shown in the Workspace exhibit. (Click the Workspace tab.)

  

  The sensors settings for the workspace are configured as shown in the Sensors exhibit. (Click the Sensors tab.)

  

  You need to ensure that Azure ATP stores data in Asia.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 323:

  DRAG DROP

  Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory(Azure AD). The domain contains the servers shown in the following table.

  You use Azure Information Protection.

  You need to ensure that you can apply Azure Information Protection labels to the file stores on Server1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order

  

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/information-protection/install-configure-rms-connector https://docs.microsoft.com/en-us/azure/information-protection/configure-servers-rms-connector

• Question 324:

  DRAG DROP

  You have a Microsoft 365 subscription.

  In the Exchange admin center, you have a data loss prevention (DLP) policy named Policy1 that has the following configurations:

  1.

  Block emails that contain financial data.

  2.

  Display the following policy tip text: Message blocked.

  From the Security and Compliance admin center, you create a DLP policy named Policy2 that has the following configurations:

  1.

  Use the following location: Exchange email.

  2.

  Display the following policy tip text: Message contains sensitive data.

  3.

  When a user sends an email, notify the user if the email contains health records.

  What is the result of the DLP policies when the user sends an email? To answer, drag the appropriate results to the correct scenarios. Each result may be used once, more than once, or not at all. You may need to drag the split bar between

  panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: The email will be blocked, and the user will receive the policy tip: Message blocked.

  If you've created DLP policies in the Exchange admin center, those policies will continue to work side by side with any policies for email that you create in the Security and Compliance Center. But note that rules created in the Exchange admin

  center take precedence. All Exchange mail flow rules are processed first, and then the DLP rules from the Security and Compliance Center are processed.

  Box 2: The email will be allowed, and the user will receive the policy tip: Message contains sensitive data.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/how-dlp-works-between-admin-centers

• Question 325:

  DRAG DROP

  Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory (Azure AD). The domain contains the servers shown in the following table.

  

  You use Azure Information Protection.

  You need to ensure that you can apply Azure Information Protection labels to the file stores on Server1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/information-protection/install-configure-rms-connector https://docs.microsoft.com/en-us/azure/information-protection/configure-servers-rms-connector

• Question 326:

  DRAG DROP

  You have a Microsoft 365 E5 subscription.

  Several users have iOS devices.

  You plan to enroll the iOS devices in Microsoft Endpoint Manager.

  You need to ensure that you can create an iOS/iPadOS enrollment profile in Microsoft Endpoint Manager.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get

• Question 327:

  DRAG DROP

  You have a Microsoft 365 E5 tenant.

  You need to implement compliance solutions that meet the following requirements:

  1.

  Use a file plan to manage retention labels.

  2.

  Identify, monitor, and automatically protect sensitive information.

  3.

  Capture employee communications for examination by designated reviewers.

  Which solution should you use for each requirement? To answer, drag the appropriate solutions to the correct requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bat between panes or

  scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/communication-compliance?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/file-plan-manager?view=o365-worldwide

• Question 328:

  DRAG DROP

  You have a Microsoft 365 E5 tenant that contains 500 Android devices enrolled in Microsoft Intune.

  You need to use Microsoft Endpoint Manager to deploy a managed Google Play app to the devices.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work#assign-a-managed-google-play-app-to-android-enterprise-fully-managed-devices

• Question 329:

  DRAG DROP

  Your company has a Microsoft 365 E5 tenant.

  Users access resources in the tenant by using both personal and company-owned Android devices. Company policies requires that the devices have a threat level of medium or lower to access Microsoft Exchange Online mailboxes.

  You need to recommend a solution to identify the threat level of the devices and to control access of the devices to the resources.

  What should you include in the solution for each device type? To answer, drag the appropriate components to the correct devices. Each component may be used once, more than once, or not at all. You may need to drag the split bar between

  panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 330:

  DRAG DROP

  Your company has Windows 10 Enterprise domain-joined devices in their environment.

  To allow for application compatibility testing, you are instructed to postpone the installation of new Windows builds.

  You want to make sure that Windows is barred from updating for the ensuing 30 days. You need to configure certain Group Policy settings to achieve your goal.

  Which of the following is the options you should choose? Answer by dragging the correct options from the list to the answer area.

  Select and Place:

  

  Correct Answer:

  

  References: https://insider.windows.com/en-us/for-business-organization-admin/