2021 Latest Microsoft MS-101 Real Exam Dumps PDF [Q166-Q189]

Share

2021 Latest Microsoft MS-101 Real Exam Dumps PDF

MS-101 Exam Dumps, MS-101 Practice Test Questions


How to Register For Exam MS-101: Microsoft 365 Mobility and Security?

Exam Register Link: https://examregistration.microsoft.com/?locale=en-us&examcode=MS-101&examname=Exam%20MS-101:%20Microsoft%20365%20Mobility%20and%20Security&returnToLearningUrl=https%3A%2F%2Fdocs.microsoft.com%2Flearn%2Fcertifications%2Fexams%2Fms-101

 

NEW QUESTION 166
You have a Microsoft 365 E5 subscription that uses Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP).
When users attempt to access the portal of a partner company, they receive the message shown in the following exhibit.

You need to enable user access to the partner company's portal.
Which Microsoft Defender ATP setting should you modify?

  • A. Alert notifications
  • B. Indicators
  • C. Custom detections
  • D. Alert suppression
  • E. Advanced hunting

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/manage-indicators

 

NEW QUESTION 167
Your company has a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

You create a retention label named Label1 that has the following configurations:
* Retains content for five years
* Automatically deletes all content that is older than five years
You turn on Auto labeling for Label1 by using a policy named Policy1. Policy1 has the following configurations:
* Applies to content that contains the word Merger
* Specifies the OneDrive accounts and SharePoint sites locations
You run the following command.
Set-RetentionCompliancePolicy Policy1 -RestrictiveRetention $true
-Force
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance-retention/set-retentioncompliancepolicy?view=exchange-ps

 

NEW QUESTION 168
From the Security & Compliance admin center, you create a content export as shown in the exhibit. (Click the Exhibit tab.)

What will be excluded from the export?

  • A. a 5-MB MP3 file
  • B. a 60-MB DOCX file
  • C. a 10-MB XLSX file
  • D. a 5-KB RTF file

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/export-a-content-search-report

 

NEW QUESTION 169
You have a Microsoft 365 subscription that uses Security & Compliance retention policies.
You implement a preservation lock on a retention policy that is assigned to all executive users.
Which two actions can you perform on the retention policy? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point?

  • A. Extend the duration of the policy
  • B. Remove locations from the policy
  • C. Reduce the duration of policy
  • D. Disable the policy
  • E. Add locations to the policy

Answer: A,E

Explanation:
Explanation/Reference:

 

NEW QUESTION 170
Your company purchases a cloud app named App1.
You plan to publish App1 by using a conditional access policy named Policy1.
You need to ensure that you can control access to App1 by using a Microsoft Cloud App Security session policy.
Which two settings should you modify in Policy1? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

References:
https://docs.microsoft.com/en-us/cloud-app-security/proxy-deployment-aad

 

NEW QUESTION 171

The SP800 assessment has the improvement actions shown in the following table.

Answer:

Explanation:

Explanation

 

NEW QUESTION 172
You have a new Microsoft 365 subscription.
A user named User1 has a mailbox in Microsoft Exchange Online.
You need to log any changes to the mailbox folder permissions of User1.
Which command should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

To enable auditing for a single mailbox (in this example, belonging to Holly Sharp), use this PowerShell command: Set-Mailbox username -AuditEnabled $true References:
https://support.microsoft.com/en-us/help/4026501/office-auditing-in-office-365-for-admins
https://docs.microsoft.com/en-us/powershell/module/exchange/mailboxes/set-mailbox?view=exchange-ps

 

NEW QUESTION 173
You have a Microsoft Azure Activity Directory (Azure AD) tenant contains the users shown in the following table.

Group3 is a member of Group1.
Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP contains the roles shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/user-roles-windows-

 

NEW QUESTION 174
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
From the Security & Compliance admin center, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group.
You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States.
Solution: From Windows PowerShell, you run the New-ComplianceSecurityFiltercmdlet with the appropriate parameters.
Does this meet the goal?

  • A. No
  • B. Yes

Answer: B

Explanation:
Section: [none]
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/permissions-filtering-for-content-search
https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance-content-search/new- compliancesecurityfilter?view=exchange-ps

 

NEW QUESTION 175
You have a Microsoft 365 subscription that contains 500 users.
You have several hundred computers that run the 64-bit version of Windows 10 Enterprise and have the following configurations:
* Two volumes that contain data
* A CPU that has two cores
* TPM disabled
* 4 GB of RAM
All the computers are managed by using Microsoft Endpoint Manager.
You need to ensure that you can turn on Windows Defender Application Guard on the computers.
What should you do first?

  • A. Replace the CPU and enable TPM.
  • B. Modify the edition of Windows 10.
  • C. Create an additional volume.
  • D. Replace the CPU and increase the RAM.

Answer: D

Explanation:
Section: [none]
Explanation:
The computers need 4 CPU cores and 8GB of RAM.
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/reqs- wd-app-guard

 

NEW QUESTION 176
You have a Microsoft 365 tenant
You have a line-of-business application named App1 that users access by using the My Apps portal.
After some recent security breaches, you implement a conditional access policy for App1 that uses Conditional Access App Control, You need to be alerted by email if impossible travel is detected for a user of Appl. The solution must ensure that alerts are generated for App1 only.
What should you do?

  • A. From the Azure Active Directory admin center, modify the conditional access policy.
  • B. From Microsoft Cloud App Security, create an app discovery policy.
  • C. From Microsoft Cloud App Security, modify the impossible travel alert policy.
  • D. From Microsoft Cloud App Security, create a Cloud Discovery anomaly detection policy.

Answer: B

 

NEW QUESTION 177
You have a Microsoft Azure Activity Directory (Azure AD) tenant contains the users shown in the following table.

Group3 is a member of Group1.
Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP contains the roles shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/user-roles-windows-

 

NEW QUESTION 178
Your company is based in the United Kingdom (UK).
Users frequently handle data that contains Personally Identifiable Information (PII).
You create a data loss prevention (DLP) policy that applies to users inside and outside the company. The policy is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

References:
https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

 

NEW QUESTION 179
You create a Microsoft 36S subscription.
You need to create a deployment plan for Microsoft Azure Advanced Threat Protection (ATP).
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

 

NEW QUESTION 180
You have a Microsoft 365 tenant named contoso.com. The tenant contains the users shown in the following table.

You have the eDiscovery cases shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/assign-ediscovery-permissions

 

NEW QUESTION 181
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.

You enroll all the computers in Upgrade Readiness.
You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.
Solution: You set the ReadyForWindows status of App1 to Highly adopted.
Does this meet the goal?

  • A. No
  • B. Yes

Answer: A

Explanation:
Explanation
App1 has a "low install count" (2% or less) so will be Ready to upgrade. We need to change the setting for App2.
References:
https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-identify-apps

 

NEW QUESTION 182
On which server should you install the Azure ATP sensor?

  • A. Server 3
  • B. Server 4
  • C. Server 1
  • D. Server 5
  • E. Server 2

Answer: B

 

NEW QUESTION 183
You need to meet the Intune requirements for the Windows 10 devices.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

References:
https://docs.microsoft.com/en-us/intune/windows-enroll

 

NEW QUESTION 184
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You sign up for Microsoft Store for Business.
The tenant contains the users shown in the following table.

Microsoft Store for Business has the following Shopping behavior settings:
* Allow users to shop is set to On.
* Make everyone a Basic Purchaser is set to Off.
You need to identify which users can install apps from the Microsoft for Business private store.
Which users should you identify?

  • A. User1, User2, User3, User4, and User5
  • B. User1 only
  • C. User1 and User2 only
  • D. User1, User2, User3, and User4 only
  • E. User3 and User4 only

Answer: C

Explanation:
Section: [none]
Explanation:
Allow users to shop controls the shopping experience in Microsoft Store for Education. When this setting is on, Purchasers and Basic Purchasers can purchase products and services from Microsoft Store for Education.
Reference:
https://docs.microsoft.com/en-us/microsoft-store/acquire-apps-microsoft-store-for-business

 

NEW QUESTION 185
You have 100 computers that run Windows 8.1 and are enrolled in Upgrade Readiness.
Two of the computers are configured as shown in the following table.

From Upgrade Readiness, you view the applications shown in the following table.

You enroll a computer named Computer3 in Upgrade Readiness. Computer3 has the following configurations:
8 GB of memory
64-bit architecture
An application named App3 installed
App3 is installed on Computer3 only.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

 

NEW QUESTION 186
You have a Microsoft 365 tenant
You have a line-of-business application named App1 that users access by using the My Apps portal.
After some recent security breaches, you implement a conditional access policy for App1 that uses Conditional Access App Control, You need to be alerted by email if impossible travel is detected for a user of Appl. The solution must ensure that alerts are generated for App1 only.
What should you do?

  • A. From Microsoft Cloud App Security, create an app discovery policy.
  • B. From the Azure Active Directory admin center, modify the conditional access policy.
  • C. From Microsoft Cloud App Security, modify the impossible travel alert policy.
  • D. From Microsoft Cloud App Security, create a Cloud Discovery anomaly detection policy.

Answer: D

 

NEW QUESTION 187
Your company has a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com. The company stores 2 TBs of data in SharePoint Online document libraries. The tenant has the labels shown in the following table.

Answer:

Explanation:

Explanation

 

NEW QUESTION 188
You need to ensure that User1 can enroll the devices to meet the technical requirements. What should you do?

  • A. From the Azure Active Directory admin center, assign User1 the Cloud device administrator rote.
  • B. From the Intune admin center, add User1 as a device enrollment manager.
  • C. From the Intune admin center, configure the Enrollment restrictions.
  • D. From the Azure Active Directory admin center, configure the Maximum number of devices per user setting.

Answer: B

Explanation:
References:
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/enroll-devices-with-device-enrollment-manager
Topic 2, A . Datum
Case Study Overview
Existing Environment
This is a case study Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Current Infrastructure
A . Datum recently purchased a Microsoft 365 subscription.
All user files are migrated to Microsoft 365.
All mailboxes are hosted in Microsoft 365. The users in each office have email suffixes that include the country of the user, for example, [email protected] or user2#uk.ad3tum.com.
Each office has a security information and event management (SIEM) appliance. The appliances come from three different vendors.
A . Datum uses and processes Personally Identifiable Information (PII).
Problem Statements
Requirements
A . Datum entered into litigation. The legal department must place a hold on all the documents of a user named User1 that are in Microsoft 365.
Business Goals
A . Datum warns to be fully compliant with all the relevant data privacy laws in the regions where it operates.
A . Datum wants to minimize the cost of hardware and software whenever possible.
Technical Requirements
A . Datum identifies the following technical requirements:
* Centrally perform log analysis for all offices.
* Aggregate all data from the SIEM appliances to a central cloud repository for later analysis.
* Ensure that a SharePoint administrator can identify who accessed a specific file stored in a document library.
* Provide the users in the finance department with access to Service assurance information in Microsoft Office 365.
* Ensure that documents and email messages containing the PII data of European Union (EU) citizens are preserved for 10 years.
* If a user attempts to download 1,000 or more files from Microsoft SharePoint Online within 30 minutes, notify a security administrator and suspend the user's user account.
* A security administrator requires a report that shows which Microsoft 36S users signed in Based on the report, the security administrator will create a policy to require multi-factor authentication when a sign in is high risk.
* Ensure that the users in the New York office can only send email messages that contain sensitive US. PII data to other New York office users. Email messages must be monitored to ensure compliance. Auditors in the New York office must have access to reports that show the sent and received email messages containing sensitive U.S. PII data.

 

NEW QUESTION 189
......

PDF (New 2021) Actual Microsoft MS-101 Exam Questions: https://www.actualtestsquiz.com/MS-101-test-torrent.html

Dumps Moneyack Guarantee - MS-101 Dumps UpTo 90% Off: https://drive.google.com/open?id=1tEjjq-BaG04AFtUgX6ai1Qeh_tCMMl_U