The latest MS-101 Microsoft 365 Mobility and Security certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the MS-101 Microsoft 365 Mobility and Security exam and earn MS-101 Microsoft 365 Mobility and Security certification.
Exam Question 81
You have a Microsoft 365 subscription.
You discover that some external users accessed content on a Microsoft SharePoint site. You modify the SharePoint sharing policy to prevent sharing outside your organization.
You need to be notified if the SharePoint sharing policy is modified in the future.
Solution: From the SharePoint site, you create an alert.
Does this meet the goal?
A. Yes
B. No
Correct Answer:
B. No
Exam Question 82
You have a Microsoft 365 subscription and an on-premises Active Directory domain named contoso.com. All client computers run Windows 10 Enterprise and are joined to the domain.
You need to enable Microsoft Defender Credential Guard on all the computers.
What should you do?
A. From the Security & Compliance admin center, configure the DKIM signatures for the domain.
B. From a domain controller, create a Group Policy object (GPO) that enables the Restrict delegation of credentials to remote servers setting.
C. From the Security & Compliance admin center, create a device security policy.
D. From a domain controller, create a Group Policy object (GPO) that enabled the Turn On Virtualization Based Security setting.
Correct Answer:
D. From a domain controller, create a Group Policy object (GPO) that enabled the Turn On Virtualization Based Security setting.
Exam Question 83
Your company has a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.
The company purchases a cloud app named App1 that supports Microsoft Cloud App Security monitoring.
You configure App1 to be available from the My Apps portal.
You need to ensure that you can monitor App1 from Cloud App Security.
What should you do?
A. From the Azure Active Directory admin center, create a conditional access policy.
B. From the Azure Active Directory admin center, create an app registration.
C. From the Endpoint Management admin center, create an app protection policy.
D. From the Endpoint Management admin center, create an app configuration policy.
Correct Answer:
A. From the Azure Active Directory admin center, create a conditional access policy.
Exam Question 84
You use Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP).
You have the Microsoft Defender ATP machine groups shown in the following table.
| Name | Rank | Members |
|---|---|---|
| Group1 | 1 | Operating system in Windows 10 |
| Group2 | 2 | Name ends with London |
| Group3 | 3 | Operating system in Windows Server 2016 |
| Ungrouped machines (default) | Last | Not applicable |
You plan to onboard computers to Microsoft Defender ATP as shown in the following table.
| Name | Operating system |
|---|---|
| Computer1-London | Windows 10 |
| Server1-London | Windows Server 2016 |
To which machine group will each computer be added? To answer, select the appropriate options in the answer are.
NOTE: Each correct selection is worth one point.
Computer1-Londo:
- Group1
- Group2
- Group3
- Ungrouped machines
Server1-London:
- Group1
- Group2
- Group3
- Ungrouped machines
Correct Answer:
- Computer1-Londo: Group1
- Server1-London: Group2
Exam Question 85
Your company has 5,000 Windows 10 devices. All the devices are protected by using Microsoft Defender Advanced Threat Protection (ATP).
You need to create a filtered view that displays which Microsoft Defender ATP alert events have a high severity and occurred during the last seven days.
What should you use in Microsoft Defender ATP?
A. the threat intelligence API
B. Automated investigations
C. Threat analytics
D. Advanced hunting
Correct Answer:
B. Automated investigations
Exam Question 86
You have a Microsoft 365 subscription.
You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.
Solution: From the Device Management admin center, you create a device configuration profile.
Does this meet the goal?
A. Yes
B. No
Correct Answer:
B. No
Exam Question 87
You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.
Your company purchases a Microsoft 365 subscription.
You need to ensure that User1 is assigned the required role to create file policies and manage alerts in the Cloud App Security admin center.
Solution: From the Security & Compliance admin center, you assign the Security Administrator role to User1.
Does this meet the goal?
A. Yes
B. No
Correct Answer:
B. No
Exam Question 88
You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.
Your company purchases a Microsoft 365 subscription.
You need to ensure that User1 is assigned the required role to create file policies and manage alerts in the Cloud App Security admin center.
Solution: From the Azure Active Directory admin center, you assign the Security administrator role to User1.
Does this meet the goal?
A. Yes
B. No
Correct Answer:
A. Yes
Exam Question 89
You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.
Your company purchases a Microsoft 365 subscription.
You need to ensure that User1 is assigned the required role to create file policies and manage alerts in the Cloud App Security admin center.
Solution: From the Azure Active Directory admin center, you assign the Compliance administrator role to User1.
Does this meet the goal?
A. Yes
B. No
Correct Answer:
A. Yes
Exam Question 90
Your company purchases a cloud app named App1.
You plan to publish App1 by using a conditional access policy named Policy1.
You need to ensure that you can control access to App1 by using a Microsoft Cloud App Security session policy.
Which two settings should you modify in Policy1? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
