MS-101 Aktualisierte Prüfungsfragen mit präzisen Antworten zur Vorbereitung der Microsoft 365-Mobilitäts- und Sicherheitsprüfung

1. You need to configure Office on the web to meet the technical requirements.

What should you do?

2. You need to create the Microsoft Store for Business .

Which user can create the store?

3. You need to create the Safe Attachments policy to meet the technical requirements.

Which option should you select?

4. You have a Microsoft 365 subscription.

All users have their email stored in Microsoft Exchange Online.

In the mailbox of a user named User 1. You need to preserve a copy of all the email messages that contain the word Project X.

WDM should you do?

5. TION NO: 191

You have two conditional access policies named Policy1 and Policy2.

Policy1 has the following settings:

✑ Assignments: Access controls:

✑ Grant: Grant access

✑ Session: 0 controls selected Enable policy: On

✑ Policy2 has the following settings:

✑ Assignments:

Access controls:

✑ Grant: Block access

✑ Session: 0 controls selected Enable policy: On

You need to ensure that User1 can access Microsoft Exchange Online only from devices that are marked as compliant.

What should you do?

6. Your company has a Microsoft 365 subscription.

You need to identify which users performed the following privileged administration tasks:

• Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint

• Opened a mailbox of which the user was not the owner

• Reset a user password

What should you use?

7. You have a Microsoft 365 E5 subscription that contains a user named User1.

The subscription has a single anti-malware policy as shown in the following exhibit.





An email message that contains text and two attachments is sent to User1. One attachment is infected with malware.

How will the email message and the attachments be processed?

8. You need to meet the compliance requirements for the Windows 10 devices.

What should you create from the Intune admin center?

9. HOTSPOT

You have three devices enrolled .n Microsoft Intune as shown .n the following table.





The device compliance policies in Intune are configured as shown in the following table.





The device compliance policies have the assignments shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

10. You need to ensure that User1 can enroll the devices to meet the technical requirements .

What should you do?

11. HOTSPOT

Your network contains an Active Directory domain named contoso.com. All client devices run Windows 10 and are joined to the domain.

You update the Windows 10 devices by using Windows Update for Business.

What is the maximum amount of time you can defer Windows 10 updates? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

12. You have a Microsoft 365 E5tenant that contains 100 Windows 10 devices.

You plan to deploy a Windows 10 Security Baseline profile that will protect secrets stored in memory.

What should you configure in the profile?

13. Your company has a Microsoft 365 subscription. The subscription contains 500 devices that run Windows 10 and 100 devices that run iOS.

You need to create Microsoft Intune device configuration profiles to meet the following requirements:

* Configure Wi-Fi connectivity to a secured network named Contoso Net.

* Require passwords of at least six characters to lock the devices.

What is the minimum number of device configuration profiles that you should create?

14. Topic 3, Litware Inc.



Case Study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.



Overview

General Overviews

Litware, Inc. is a technology research company. The company has a main office in Montreal and a branch office in Seattle.



Environment

Existing Environment

The network contains an on-premises Active Directory domain named litware.com.

The domain contains the users shown in the following table.







Microsoft Cloud Environment

Litware has a Microsoft 365 subscription that contains a verified domain named litware.com. The subscription syncs to the on-premises domain.



Litware uses Microsoft Intune for device management and has the enrolled devices shown in the following table.







Litware.com contains the security groups shown in the following table.







Litware uses Microsoft SharePoint Online and Microsoft Teams for collaboration.

The verified domain is linked to an Azure Active Directory (Azure AD) tenant named litware.com. Audit log search is turned on for the litware.com tenant.



Problem Statements

Litware identifies the following issues:

✑ Users open email attachments that contain malicious content.

✑ Devices without an assigned compliance policy show a status of Compliant.

✑ User1 reports that the Sensitivity option in Microsoft Office for the web fails to appear.

✑ Internal product codes and confidential supplier ID numbers are often shared during Microsoft Teams meetings and chat sessions that include guest users and external users.



Requirements

Planned Changes

Litware plans to implement the following changes:

✑ Implement device configuration profiles that will configure the endpoint protection template settings for supported devices.

✑ Configure information governance for Microsoft OneDrive, SharePoint Online, and Microsoft Teams.

✑ Implement data loss prevention (DLP) policies to protect confidential information.

✑ Grant User2 permissions to review the audit logs of he litware.com tenant.

✑ Deploy new devices to the Seattle office as shown in the following table.







✑ Implement a notification system for when DLP policies are triggered.

✑ Configure a Safe Attachments policy for the litware.com tenant.



Technical Requirements

Litware identifies the following technical requirements:

✑ Retention settings must be applied automatically to all the data stored in SharePoint Online sites, OneDrive accounts, and Microsoft Teams channel messages, and the data must be retained for five years.

✑ Emails messages that contain attachments must be delivered immediately, and placeholder must be provided for the attachments until scanning is complete.

✑ All the Windows 10 devices in the Seattle office must be enrolled in Intune automatically when the devices are joined to or registered with Azure AD.

✑ Devices without an assigned compliance policy must show a status of Not Compliant in the Microsoft Endpoint Manager admin center.



A notification must appear in the Microsoft 365 compliance center when a DLP policy is triggered.

User2 must be granted the permissions to review audit logs for the following activities:

- Admin activities in Microsoft Exchange Online

- Admin activities in SharePoint Online

- Admin activities in Azure AD

Users must be able to apply sensitivity labels to documents by using Office for the web.

Windows Autopilot must be used for device provisioning, whenever possible.

A DLP policy must be created to meet the following requirements:

- Confidential information must not be shared in Microsoft Teams chat sessions, meetings, or channel messages.

- Messages that contain internal product codes or supplier ID numbers must be blocked and deleted.

The principle of least privilege must be used.



You need to create the DLP policy to meet the technical requirements.

What should you configure first?

15. You have a Microsoft 365 subscription.

You plan to enable Microsoft Azure Information Protection.

You need to ensure that only the members of a group named PilotUsers can protect content

What should you do?

16. HOTSPOT

You have a Microsoft 365 subscription that contains all the user data.

You plan to create the retention policy shown in the Locations exhibit. (Click the Locations tab.)





You configure the Advanced retention settings as shown in the Retention exhibit. (Click the Retention tab.)





The locations specified in the policy include the groups shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

17. Which report should the New York office auditors view?

18. You need to ensure that the support technicians can meet the technical requirement for the Montreal office mobile devices.

What is the minimum of dedicated support technicians required?

19. On which server should you use the Defender for identity sensor?

20. Your company has a Microsoft 365 E5 subscription.

Users in the research department work with sensitive data.

You need to prevent the research department users from accessing potentially unsafe websites by using hyperlinks embedded in email messages and documents. Users in other departments must not be restricted.

What should you do from the Security & Compliance admin center?

21. You need to notify the manager of the human resources department when a user in the department shares a file or folder from the department’s Microsoft SharePoint site.

What should you do?

22. HOTSPOT

You have a document in Microsoft OneDrive that is encrypted by using Microsoft Azure Information Protection as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

23. DRAG DROP

Your company purchases a cloud app named App1.

You need to ensure that you can use Microsoft Cloud App Security to block downloads in App1. App1 supports session controls.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

24. HOTSPOT

You need to configure a conditional access policy to meet the compliance requirements.

You add Exchange Online as a cloud app.

Which two additional settings should you configure in Policy1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.