Exam Questions Answers Braindumps MS-101 Exam Dumps PDF Questions
Download Free Microsoft MS-101 Real Exam Questions
What Skills Should You Master for MS-101?
The topics covered in this certification exam contain:
- Implementing modern device services;
- Implementing Microsoft 365 security measures & threat management.
- Managing Microsoft 365 governance & compliance;
The first domain is all about implementing modern device services and imparts the knowledge related to Mobile Device Management (MDM). The candidate will learn how to plan for MDM and accomplish its integration with Azure AD.
The other skills learned in this section include device compliance, Conditional Access Policies (as well as their design and management), and planning for compliance of devices. When it comes to apps planning, this section covers tons of stuff like device monitoring and security, device profile planning, and configuring Microsoft Store for Business.
A bit of Windows 10 deployment is also covered in this part of the test. It will teach the candidate about Windows as a Service (WaaS) planning, various methods for Windows 10 Enterprise deployment, using Desktop Analytics, and evaluating Windows 10 Enterprise security features.
The second section focuses on Cloud App Security (CAS) and Advanced Threat Protection (ATP) as well as Microsoft 365 ATP policies. The candidate should be able to perform CAS Solution designing, configure its policies, upload traffic logs for CAS, and CAS security alerts management, among the rest.
Threat management has given much importance in this domain. Candidates will show their ability to plan a threat management solution, accomplish the implementation of Azure Advanced Threat Protection, and handle Microsoft 365 ATP policies configuration. Advanced Threat Analytics (ATA) incidents monitoring is also covered along with the management of alerts and security reports. In this subtopic, candidates will learn about how to manage service assurance dashboard, Azure AD Identity Protection, and Microsoft 365 security alerts.
The last theme of MS-101 emphasizes the management of Microsoft 365 Governance and Compliance, Windows Information Protection (WIP), and working with Data Loss Prevention (DLP) extensively. It covers the 35-40% part of the entire exam. To tackle this domain, applicants should learn more about managing DLP exceptions, SharePoint and OneDrive use, Microsoft 365 backup planning, audit log configuring, Unified Audit Logs monitoring, eDiscovery, and configuring audit log retention.
Topics like DLP policies, designing data retention policies in Microsoft 365, and Data Governance are covered as well. Also, one should pay attention to skills in configuring information retention, planning for Microsoft 365 back-up, and restoring the deleted content.
Microsoft MS-101: Preparation Process
This certification exam has a total of three domains with each covering different knowledge and skill areas. It’s important to understand these topics and develop practical skills to be able to pass the test. Microsoft offers various preparation resources that the individuals can use for exam preparation. We’ll look at them in detail.
Microsoft 365 Mobility and Security MS-101 Exam
Microsoft 365 Mobility and Security MS-101 Exam which is related to Microsoft 365 Certified Enterprise Administrator Expert Certification. This exam validates Candidates ability to implement modern device services, Microsoft 365 Security and threat management manage Microsoft 365 Governance and Compliance. Microsoft IT Professionals usually hold or pursue this certification and you can expect the same job role after completion of this certification.
NEW QUESTION 24
You need to meet the technical requirement for the SharePoint administrator. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance#
NEW QUESTION 25
Your company has a Microsoft 365 subscription that contains the domains shown in the following table.
The company plans to add a custom domain named fabrikam.com to the subscription and then to enable enrollment of devices to Intune by using auto-discovery for fabrikam.com.
You need to add a DNS record to the fabrikam.com zone.
Which record type should you use for the new record?
- A. PTR
- B. SRV
- C. TXT
- D. CNAME
Answer: C
NEW QUESTION 26
You have a Microsoft 365 subscription that contains the users in the following table.
In Microsoft Endpoint Manager, you create two device type restrictions that have the settings shown in the following table.
In Microsoft Endpoint Manager, you create three device limit restrictions that have the settings shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 27
You enable the Azure AD Identity Protection weekly digest email.
You create the users shown in the following table.
Which users will receive the weekly digest email automatically?
- A. Admin2, Admin3, and Admin4 only
- B. Admin1 and Admin3 only
- C. Admin1, Admin2, Admin3, and Admin4
- D. Admin2 and Admin3 only
- E. Admin3 only
Answer: B
Explanation:
Explanation
Explanation:
By default, all Global Admins receive the email. Any newly created Global Admins, Security Readers or Security Administrators will automatically be added to the recipients list.
NEW QUESTION 28
Your company uses Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP).
The devices onboarded to Microsoft Defender ATP are shown in the following table.
The alerts visible in the Microsoft Defender ATP alerts queue are shown in the following table.
You create a suppression rule that has the following settings:
Triggering IOC: Any IOC
Action: Hide alert
Suppression scope: Alerts on ATP1 machine group
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 29
You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide#using-a-retention-label-as-a-condition-in-a-dlp-policy
NEW QUESTION 30
You plan to allow users from the engineering department to enroll their mobile device in mobile device management (MDM).
The device type restrictions are configured as shown in the following table.
The device limit restrictions are configured as shown in the following table.
What is the effective configuration for the members of the Engineering group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 31
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure pilot co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You add Device1 to a Configuration Manager device collection.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Section: [none]
Explanation/Reference:
https://docs.microsoft.com/en-us/mem/configmgr/comanage/tutorial-co-manage-clients
NEW QUESTION 32
You need to ensure that User1 can enroll the devices to meet the technical requirements.
What should you do?
- A. From the Endpoint Management admin center, configure the Enrollment restrictions.
- B. From the Endpoint Management admin center, add User1 as a device enrollment manager.
- C. From the Azure Active Directory admin center, configure the Maximum number of devices per user setting.
- D. From the Azure Active Directory admin center, assign User1 the Cloud device administrator role.
Answer: B
Explanation:
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/enroll-devices-with-device-enrollment-manager Implement modern device services Testlet 3 Case Study Overview ADatum Corporation is an international financial services company that has 5,000 employees.
ADatum has six offices: a main office in New York and five branch offices in Germany, the United Kingdom, France, Spain, and Italy.
All the offices are connected to each other by using a WAN link. Each office connects directly to the Internet.
Existing Environment
Current Infrastructure
ADatum recently purchased a Microsoft 365 subscription.
All user files are migrated to Microsoft 365.
All mailboxes are hosted in Microsoft 365. The users in each office have email suffixes that include the country of the user, for example, [email protected] or [email protected].
Each office has a security information and event management (SIEM) appliance. The appliance comes from three different vendors.
ADatum uses and processes Personally Identifiable Information (PII).
Problem Statements
ADatum entered into litigation. The legal department must place a hold on all the documents of a user named User1 that are in Microsoft 365.
Requirements
Business Goals
ADatum wants to be fully compliant with all the relevant data privacy laws in the regions where is operates.
ADatum wants to minimize the cost of hardware and software whenever possible.
Technical Requirements
ADatum identifies the following technical requirements:
* Centrally perform log analysis for all offices.
* Aggregate all data from the SIEM appliances to a central cloud repository for later analysis.
* Ensure that a SharePoint administrator can identify who accessed a specific file stored in a document library.
* Provide the users in the finance department with access to Service assurance information in Microsoft Office 365.
* Ensure that documents and email messages containing the PII data of European Union (EU) citizens are preserved for 10 years.
* If a user attempts to download 1,000 or more files from Microsoft SharePoint Online within 30 minutes, notify a security administrator and suspend the user's user account.
* A security administrator requires a report that shown which Microsoft 365 users signed in. Based on the report, the security administrator will create a policy to require multi-factor authentication when a sign-in is high risk.
* Ensure that the users in the New York office can only send email messages that contain sensitive U.S. PII data to other New York office uses. Email messages must be monitored to ensure compliance. Auditors in the New York office must have access to reports that show the sent and received email messages containing sensitive U.S. PII data.
NEW QUESTION 33
You configure an anti-phishing policy as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/set-up-anti-phishing-policies#learn-about-atp-ant
NEW QUESTION 34
You need to meet the technical requirement for the SharePoint administrator. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance#
NEW QUESTION 35
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription.
You create an account for a new security administrator named SecAdmin1.
You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.
Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the SharePoint admin role.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Section: [none]
Explanation:
You need to assign the Security Administrator role.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365- worldwide
NEW QUESTION 36
You have a Microsoft Azure Activity Directory (Azure AD) tenant contains the users shown in the following table.
Group3 is a member of Group1.
Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP contains the roles shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/user-roles-windows-
NEW QUESTION 37
You need to configure a conditional access policy to meet the compliance requirements.
You add Exchange Online as a cloud app.
Which two additional settings should you configure in Policy1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 38
You configure an anti-phishing policy as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/set-up-anti-phishing-policies#learn-about-atp-ant
NEW QUESTION 39
You have a Microsoft Azure Activity Directory (Azure AD) tenant contains the users shown in the following table.
Group3 is a member of Group1.
Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP contains the roles shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection
NEW QUESTION 40
You have a Microsoft 365 tenant.
You create a retention label as shown in the Retention Label exhibit. (Click the Retention Label tab.)
You create a label policy as shown in the Label Policy Exhibit. (Click the Label Policy tab.)
The label policy is configured as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies
NEW QUESTION 41
You have an Azure subscription and an on-premises Active Directory domain. The domain contains 50 computers that run Windows 10.
You need to centrally monitor System log events from the computers.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-collect-windows-computer
NEW QUESTION 42
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You create an Azure Advanced Threat Protection (ATP) workspace named Workspace1.
The tenant contains the users shown in the following table.
You need to modify the configuration of the Azure ATP sensors.
Solution: You instruct User1 to modify the Azure ATP sensor configuration.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Section: [none]
Explanation:
Only Azure ATP administrators can modify the sensors.
References:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-role-groups
NEW QUESTION 43
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
Your company implements Windows Information Protection (WIP).
You need to modify which users and applications are affected by WIP.
What should you do? To answer, select the appropriate options m the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure
NEW QUESTION 44
Your company has a Microsoft 365 subscription that uses an Azure Directory (Azure AD0 tenant named Contoso.com. The tenant contains the users shown in the following table.
You create a relation label named Label1 that has the following configurations:
Retains content for five years.
Automatically deletes all content that is older than five years.
You turn on Auto labeling for Label1 b using a policy named Policy1. Policy1 has the following configurations:
* Retains content for five years
* Automatically deletes all content that is older than five years
You turn on Auto labeling for Label 1 by using a policy named Policy1. Policy has the following configurations:
* Applies to content that contains the word Merger
* Specifies the OneDrive accounts and SharePoint sites locations
You run the following command
Set RetentionConpliancePolicy Policy1 RestrictiveRelention $true Force
Answer:
Explanation:
NEW QUESTION 45
Your company has digitally signed applications.
You need to ensure that Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) considers the digitally signed applications safe and never analyzes them.
What should you create in the Microsoft Defender Security Center?
- A. a custom detection rule
- B. an indicator
- C. an alert suppression rule
- D. an allowed/blocked list rule
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/manage-indicators
NEW QUESTION 46
You have a Microsoft 365 E5 subscription.
You run an eDiscovery search that returns the following Azure Rights Management (Azure RMS) - encrypted content:
* Microsoft Exchange emails
* Microsoft OneDrive documents
* Microsoft SharePoint documents
Which content can be decrypted when you export the eDiscovery search results?
- A. SharePoint documents, OneDrive documents, and Exchange emails
- B. Exchange emails only
- C. SharePoint documents only
- D. SharePoint documents and OneDrive documents only
- E. OneDrive documents only
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide
Topic 1, A. Datum
Case Study:
Overview
Existing Environment
This is a case study Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Current Infrastructure
A . Datum recently purchased a Microsoft 365 subscription.
All user files are migrated to Microsoft 365.
All mailboxes are hosted in Microsoft 365. The users in each office have email suffixes that include the country of the user, for example, [email protected] or user2#uk.ad3tum.com.
Each office has a security information and event management (SIEM) appliance. The appliances come from three different vendors.
A . Datum uses and processes Personally Identifiable Information (PII).
Problem Statements
Requirements
A . Datum entered into litigation. The legal department must place a hold on all the documents of a user named User1 that are in Microsoft 365.
Business Goals
A . Datum warns to be fully compliant with all the relevant data privacy laws in the regions where it operates.
A . Datum wants to minimize the cost of hardware and software whenever possible.
Technical Requirements
A . Datum identifies the following technical requirements:
* Centrally perform log analysis for all offices.
* Aggregate all data from the SIEM appliances to a central cloud repository for later analysis.
* Ensure that a SharePoint administrator can identify who accessed a specific file stored in a document library.
* Provide the users in the finance department with access to Service assurance information in Microsoft Office 365.
* Ensure that documents and email messages containing the PII data of European Union (EU) citizens are preserved for 10 years.
* If a user attempts to download 1,000 or more files from Microsoft SharePoint Online within 30 minutes, notify a security administrator and suspend the user's user account.
* A security administrator requires a report that shows which Microsoft 36S users signed in Based on the report, the security administrator will create a policy to require multi-factor authentication when a sign in is high risk.
* Ensure that the users in the New York office can only send email messages that contain sensitive US.
PII data to other New York office users. Email messages must be monitored to ensure compliance.
Auditors in the New York office must have access to reports that show the sent and received email messages containing sensitive U.S. PII data.
NEW QUESTION 47
......
Latest Microsoft MS-101 Real Exam Dumps PDF: https://www.updatedumps.com/Microsoft/MS-101-updated-exam-dumps.html
MS-101 Exam Dumps, MS-101 Practice Test Questions: https://drive.google.com/open?id=15Sat1atJLXSs257EtSa2ao5D5x-DiLVh