Verified MS-101 dumps Q&As - 2022 Latest MS-101 Download
Updated 100% Cover Real MS-101 Exam Questions - 100% Pass Guarantee
NEW QUESTION 180
You have a Microsoft 365 subscription.
All users have their email stored in Microsoft Exchange Online.
In the mailbox of a user named User1, you need to preserve a copy of all the email messages that contain the word Project X.
What should you do first?
- A. From the Security & Compliance admin center, create a data loss prevention (DLP) policy.
- B. From the Security & Compliance admin center, create a label and label policy.
- C. From the Security & Compliance admin center, create, create a label and a label policy.
- D. From the Security & Compliance admin center, start a message trace.
- E. From the Exchange admin center, start a mail flow message trace
Answer: B
Explanation:
Explanation
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.
Solution: From the Device Management admin center, you create a device configuration profile.
Does this meet the goal?
NEW QUESTION 181
In Microsoft 365, you configure a data loss prevention (DLP) policy named Policy1. Policy1 detects the sharing of United States (US) bank account numbers in email messages and attachments.
Policy1 is configured as shown in the exhibit. (Click the Exhibit tab.)
You need to ensure that internal users can email documents that contain US bank account numbers to external users who have an email suffix of contoso.com.
What should you configure?
- A. a group
- B. a condition
- C. an action
- D. an exception
Answer: C
Explanation:
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies#how-dlp-policies-work
NEW QUESTION 182
You have the Microsoft Azure Active Director (Azure AD) users shown in the following table.
You create a conditional access policy that has the following settings:
* The Assignments settings are configured as follows:
* Users and groups: Group1
* Cloud apps: Microsoft Office 365 Exchange Online
* Conditions: Include All device state, exclude Device marked as compliant
* Access controls is set to Block access.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 183
You need to create the Microsoft Store for Business.
Which user can create the store?
- A. User3
- B. User2
- C. User4
- D. User5
Answer: C
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/microsoft-store/roles-and-permissions-microsoft-store-for-business
NEW QUESTION 184
You have a Microsoft 365 subscription.
All users are assigned Microsoft Azure Active Directory Premium licenses.
From the Device Management admin center, you set Microsoft Intune as the MDM authority.
You need to ensure that when the members of a group named Marketing join a device to Azure Active Directory (Azure AD), the device is enrolled automatically in Intune. The Marketing group members must be limited to five devices enrolled in Intune.
Which two options should you use to perform the configurations? To answer, select the appropriate blades in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/intune/enrollment/device-enrollment-manager-enroll
https://docs.microsoft.com/en-us/intune/enrollment/enrollment-restrictions-set
NEW QUESTION 185
Your network contains an Active Directory domain named contoso.com. The domain contains 100 Windows 8.1 devices. You plan to deploy a custom Windows 10 Enterprise image to the Windows 8.1 devices. You need to recommend a Windows 10 deployment method. What should you recommend?
- A. an in place upgrade
- B. Windows Autopilot
- C. wipe and load refresh
- D. a provisiong package
Answer: C
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit In-place upgrade differs from computer refresh in that you cannot use a custom image to perform the in-place upgrade. In this article we will add a default Windows 10 image to the production deployment share specifically to perform an in-place upgrade. https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/refresh-a-windows-7-computer-with-windows-10 To complete a computer refresh you will: Back up data and settings locally, in a backup folder. Wipe the partition, except for the backup folder. Apply the new operating system image. Install other applications. Restore data and settings.
NEW QUESTION 186
Your company has a Microsoft 365 E3 subscription.
All devices run Windows 10 Pro and are joined to Microsoft Azure Active Directory (Azure AD).
You need to change the edition of Windows 10 to Enterprise the next time users sign in to their computer. The solution must minimize downtime for the users.
What should you use?
- A. Subscription Activation
- B. Windows Autopilot
- C. an in-place upgrade
- D. Windows Update
Answer: D
NEW QUESTION 187
You use Windows Defender Advanced Threat Protection (Windows Defender ATP).
You have the Windows Defender ATP machine groups shown in the following table.
You plan to onboard computers to Windows Defender ATP as shown in the following table.
To which machine group will each computer be added? To answer, select the appropriate options in the answer are.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 188
You have a Microsoft 365 E5 tenant that contains a Microsoft SharePoint Online site named Site1. Site1 contains the files shown in the following table.
You create a sensitivity label named Sensitivity1 and an auto-label policy that has the following configurations:
* Name: AutoLabel1
* Label to auto-apply: Sensitivity1
* Rules for SharePoint Online sites: Rule1-SPO
* Choose locations where you want to apply the label: Site1
Rule1-SPO is configured as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-wo
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide
NEW QUESTION 189
HOTSPOT
You have an Azure Active Directory (Azure AD) tenant that contains two users named User1 and User2.
On September 5, 2019, you create and enforce a terms of use (ToU) in the tenant. The ToU has the following settings:
* Name: Terms1
* Display name: Terms1 name
* Require users to expand the terms of use: Off
* Require users to consent on every device: Off
* Expire consents: On
* Expire starting on: October 10, 2019
* Frequency: Monthly
User1 accepts Terms1 on September 5, 2019. User2 accepts Terms1 on October 5, 2019.
When will Terms1 expire for the first time for each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/terms-of-use
NEW QUESTION 190
Your company has a Microsoft 365 subscription.
You need to configure Microsoft 365 to meet the following requirements:
* Malware found in email attachments must be quarantined for 20 days.
* The email address of senders to your company must be verified.
Which two options should you configure in the Security & Compliance admin center? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 191
You implement Microsoft Azure Advanced Threat Protection (Azure ATP).
You have an Azure ATP sensor configured as shown in the following exhibit.
How long after the Azure ATP cloud service is updated will the sensor update?
- A. 20 hours
- B. 7 hours
- C. 12 hours
- D. 48 hours
Answer: C
NEW QUESTION 192
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals- Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure pilot co-management
You add a new device named Device 1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You unjoin Device1 from the Active Directory domain.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
NEW QUESTION 193
Your company has a Microsoft 36S subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com. The company stores 2 TBs of data in SharePoint Online document libraries.
The tenant has the labels shown in the following table.
From the Azure portal, you active unified labeling.
For each of the following statements, select yes if the statement is true Otherwise , select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 194
HOTSPOT
You have a Microsoft 365 E5 tenant that contains five devices enrolled in Microsoft Intune as shown in the following table.
All the devices have an app named App1 installed.
You need to prevent users from copying data from App1 and pasting the data into other apps.
Which policy should you create in Microsoft Endpoint Manager, and what is the minimum number of required policies? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation/Reference:
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy
NEW QUESTION 195
From the Security & Compliance admin center, you create a retention policy named Policy1.
You need to prevent all users from disabling the policy or reducing the retention period.
Which command should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance-retention/set-retentioncom
NEW QUESTION 196
Your company uses Microsoft Azure Advanced Threat Protection (ATP) and Windows Defender ATP.
You need to integrate Windows Defender ATP and Azure ATP.
What should you do?
- A. From Azure ATP, configure the notifications and reports.
- B. From Windows Defender Security Center, configure the Machine management settings.
- C. From Windows Defender Security Center, configure the General settings.
- D. From Azure ATP, configure the data sources.
Answer: D
Explanation:
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/integrate-wd-atp
NEW QUESTION 197
Your company has a Microsoft 365 subscription.
You need to identify which users performed the following privileged administration tasks:
Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint
Opened a mailbox of which the user was not the owner
Reset a user password
What should you use?
- A. Security & Compliance audit log search
- B. Microsoft Azure Activity Directory (Azure AD) sign-ins
- C. Microsoft Azure Activity Directory (Azure AD) audit logs
- D. Security & Compliance content search
Answer: C
Explanation:
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/activity-logs-overview
NEW QUESTION 198
You have a Microsoft 365 tenant named contoso.com. The tenant contains the users shown in the following table.
You have the eDiscovery cases shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/assign-ediscovery-permissions
NEW QUESTION 199 
You have an eDiscovery case shown in the follow table.
For each of the following statements select yes of the statements is true. Otherwise, select NO.
NOTE: each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 200
You need to meet the technical requirement for log analysis.
What is the minimum number of data sources and log collectors you should create from Microsoft Cloud App Security? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/cloud-app-security/discovery-docker
NEW QUESTION 201
......
Use Real Dumps - 100% Free MS-101 Exam Dumps: https://actualtorrent.realvce.com/MS-101-VCE-file.html