MS-101 Pre-Exam Practice Tests | (Updated 360 Questions)
Valid MS-101 Exam Q&A PDF - One Year Free Update
NEW QUESTION 39
You have a Microsoft 36S subscription.
Your company purchases a new financial application named App1.
From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover that many applications have a low score because they are missing information about domain registration and consumer popularity.
You need to prevent the missing information from affecting the score.
What should you configure from the Cloud Discover settings?
- A. App tags
- B. Score metrics
- C. Default behavior
- D. Organization details
Answer: A
Explanation:
Explanation
References:
References:
https://docs.microsoft.com/en-us/cloud-app-security/discovered-app-queries
NEW QUESTION 40
From the Security & Compliance admin center, you create a content export as shown in the exhibit. (Click the Exhibit tab.)
What will be excluded from the export?
- A. a 10-MB XLSX file
- B. a 60-MB DOCX file
- C. a 5-KB RTF file
- D. a 5-MB MP3 file
Answer: D
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/export-a-content-search-report
NEW QUESTION 41
You have a Microsoft 365 E5 tenant that contains a user named User1.
You plan to implement insider risk management.
You need to ensure that User1 can perform the following tasks:
* Review alerts.
* Manage cases.
* Create notice templates.
* Review user emails by using Content explorer.
The solution must use the principle of least privilege.
To which role group should you add User1?
- A. Insider Risk Management Investigators
- B. Insider Risk Management
- C. Insider Risk Management Analysts
- D. Insider Risk Management Admin
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-configure?view=o365-wor
NEW QUESTION 42
You have three devices enrolled .n Microsoft Intune as shown .n the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 43
You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide
NEW QUESTION 44
You have a Microsoft 365 subscription.
You need to be notified if users receive email containing a file that has a virus.
What should you do?
- A. From the Exchange admin center, create a mail flow rule.
- B. From the Security & Compliance admin center, create an alert policy.
- C. From the Exchange admin center, create a spam filter policy.
- D. From the Security & Compliance admin center, create a data governance event.
Answer: A
Explanation:
You can inspect email attachments in your Exchange Online organization by setting up mail flow rules.
Exchange Online offers mail flow rules that provide the ability to examine email attachments as a part of your messaging security and compliance needs. When you inspect attachments, you can then take action on the messages that were inspected based on the content or characteristics of those attachments.
Incorrect answers:
A: A spam filter policy includes selecting the action to take on messages that are identified as spam. Spam filter policy settings are applied to inbound messages.
B: A data governance event commences when an administrator creates it, following which background processes look for content relating to the event and take the retention action defined in the label. The retention action can be to keep or remove items, or to mark them for manual disposition.
References:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-anti-malware-policies
https://www.petri.com/office-365-event-based-retention
NEW QUESTION 45
You have a Microsoft 365 tenant that has Enable Security defaults set to in Azure Active Directory (Azure AD).
The tenant has two Compliance Manager assessments as shown in the following table.
The SP800 assessment has the improvement actions shown in the following table.
You perform the following actions:
* For the Data Protection Baseline assessment, change the Test status of Establish a threat intelligence program to Implemented.
* Enable multi-factor authentication (MFA) for all users.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text Description automatically generated
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-assessments?view=o365-world
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwid
NEW QUESTION 46
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You have three applications named App1, App2, and App3 that have the same file format.
Your company uses Windows Information Protection (WIP). WIP has the following configurations:
* Windows Information Protection mode: Silent
* Protected apps: App1
* Exempt apps: App2
From App1, you create a file named File1.
What is the effect of the configurations? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 47
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure a pilot for co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You create a device configuration profile from the Device Management admin center.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
NEW QUESTION 48
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are deploying Microsoft Intune.
You successfully enroll Windows 10 devices in Intune.
When you try to enroll an iOS device in Intune, you get an error.
You need to ensure that you can enroll the iOS device in Intune.
Solution: You configure the Apple MDM Push certificate.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/intune/apple-mdm-push-certificate-get
NEW QUESTION 49
You create a Microsoft 365 subscription.
Your company's privacy policy states that user activities must NOT be audited.
You need to disable audit logging in Microsoft 365.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/turn-audit-log-search-on-or-off
NEW QUESTION 50
You plan to allow users from the engineering department to enroll their mobile device in mobile device management (MDM).
The device type restrictions are configured as shown in the following table.
The device limit restrictions are configured as shown in the following table.
What is the effective configuration for the members of the Engineering group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 51
From the Microsoft Azure Active Directory (Azure AD) Identity Protection dashboard, you view the risk events shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-getstarted
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-configure-named-locations
NEW QUESTION 52
You have a Microsoft 365 subscription.
You are planning a threat management solution for your organization.
You need to minimize the likelihood that users will be affected by the following threats:
Opening files in Microsoft SharePoint that contain malicious content
Impersonation and spoofing attacks in email messages
Which policies should you create in the Security & Compliance admin center? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 53
You have a Microsoft 365 subscription.
All users have their email stored in Microsoft Exchange Online.
In the mailbox of a user named User 1. You need to preserve a copy of all the email messages that contain the word Project X.
WDM should you do?
- A. From the Security fit Compliance adman center, start a message trace.
- B. From the Exchange admin center, create a mail now rule.
- C. From Microsoft Cloud App Security, create an access policy.
- D. From the Security & Compliance admin center, create an eDiscovery case.
Answer: C
Explanation:
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/ediscovery-cases#step-2-create-a-new-case
NEW QUESTION 54
You have a Microsoft 365 subscription that contains all the user data.
You plan to create the retention policy shown in the Locations exhibit. (Click the Locations tab.)
You configure the Advanced retention settings as shown in the Retention exhibit. (Click the Retention tab.)
The locations specified in the policy include the groups shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies
NEW QUESTION 55
You have a Microsoft 365 subscription that contains all the user data.
You plan to create the retention policy shown in the Locations exhibit. (Click the Locations tab.)
You configure the Advanced retention settings as shown in the Retention exhibit. (Click the Retention tab.)
The locations specified in the policy include the groups shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies
NEW QUESTION 56
From the Security & Compliance admin center, you create a content export as shown in the exhibit. (Click the Exhibit tab.)
What will be excluded from the export?
- A. an 80-MB PPTX file
- B. a 10-MB XLSX file
- C. a 5-KB RTF file
- D. a 5-MB MP3 file
Answer: D
Explanation:
Explanation
Unrecognized file formats are excluded from the search.
Certain types of files, such as Bitmap or MP3 files, don't contain content that can be indexed. As a result, the search indexing servers in Exchange and SharePoint don't perform full-text indexing on these types of files.
These types of files are considered to be unsupported file types.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/partially-indexed-items-in-content-search?view=o36
https://docs.microsoft.com/en-us/office365/securitycompliance/export-a-content-search-report
NEW QUESTION 57
You have a Microsoft 365 tenant named contoso.com. The tenant contains the users shown in the following table.
You have the eDiscovery cases shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/assign-ediscovery-permissions
NEW QUESTION 58
You have a Microsoft 365 F5 subscription.
You plan to deploy 100 new Windows 10 devices.
You need to order the appropriate version of Windows 10 for the new devices. The version must Meet the following requirements.
Be serviced for a minimum of 24 moths.
Support Microsoft Application Virtualization (App-V)
Which version should you identify?
- A. Window 10 Pro, version 1000
- B. Window 10 Pro, version 1000
- C. Window 10 Pro, version 2004
- D. Window 10 Enterprise, version 2004
Answer: D
NEW QUESTION 59
You have three devices enrolled .n Microsoft Intune as shown .n the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 60
You deploy Microsoft Azure Information Protection.
You need to ensure that a security administrator named SecAdmin1 can always read and inspect data protected by Azure Rights Management (Azure RMS).
What should you do?
- A. From the Security & Compliance admin center, add User1 to the Compliance Administrator role group.
- B. From the Security & Compliance admin center, add User1 to the eDiscovery Manager role group.
- C. From the Azure Active Directory admin center, add User1 to the Security Reader role group.
- D. From Windows PowerShell, enable the super user feature and assign the role to SecAdmin1.
Answer: D
Explanation:
References:
https://docs.microsoft.com/en-us/azure/information-protection/configure-super-users
NEW QUESTION 61
You have a Microsoft 365 tenant that contains 100 Windows 10 devices. The devices are managed by using Microsoft Endpoint Manager.
You plan to create two attack surface reduction (ASR) policies named ASR1 and ASR2. ASR1 will be used to configure Microsoft Defender Application Guard. ASR2 will be used to configure Microsoft Defender SmartScreen.
Which ASR profile type should you use for each policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-security-asr-policy
NEW QUESTION 62
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.
You enroll all the computers in Upgrade Readiness.
You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.
Solution: You set the ReadyForWindows status of App1 to Highly adopted.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Section: [none]
Explanation:
App1 has a "low install count" (2% or less) so will be Ready to upgrade. We need to change the setting for App2.
References:
https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-identify-apps
NEW QUESTION 63
Your network contains an Active Directory forest named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You use Microsoft System Center Configuration Manager (Current Branch) for device management.
You have the Windows 10 devices shown in the following table.
You configure Configuration Manager co-management as follows:
* Automatic enrollment in Intune: Pilot
* Pilot collection: Collection2
You configure co-management workloads as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 64
......
Microsoft 365 Mobility and Security MS-101 Exam
Microsoft 365 Mobility and Security MS-101 Exam which is related to Microsoft 365 Certified Enterprise Administrator Expert Certification. This exam validates Candidates ability to implement modern device services, Microsoft 365 Security and threat management manage Microsoft 365 Governance and Compliance. Microsoft IT Professionals usually hold or pursue this certification and you can expect the same job role after completion of this certification.
How to Register For Exam MS-101: Microsoft 365 Mobility and Security?
Microsoft 365 Mobility and Security Free Update Certification Sample Questions: https://www.lead2passed.com/Microsoft/MS-101-practice-exam-dumps.html
Trend for Microsoft MS-101 pdf dumps before actual exam: https://drive.google.com/open?id=1GF4fIhbH6VPzjizWkf_Z-JUZWg4ZQR3z
