MS-900 practice questions 101–110

1. Question 101 · 474 in bank

   Your company has a Microsoft Office 365 subscription. As an administrator for this subscription, you have been tasked with recommending a solution that forces cloud-based applications to use the same credentials as on-premises applications. Which of the following should you recommend?

   • AAzure AD Connect.
   • BConfiguration Manager.
   • CWindows AutoPilot.
   • DAzure AD Application Proxy.

   Show answer

   Answer: A

   Explanation

   A. Azure AD Connect is the correct solution to ensure cloud-based applications use the same credentials as on-premises applications. Azure AD Connect is a tool that synchronizes user accounts between on-premises Active Directory and Azure Active Directory, which enables a user's on-premises password to be used for cloud-based applications. This eliminates the need for users to remember multiple sets of credentials and makes the sign-in process more seamless. B. Configuration Manager is a solution for managing devices and applications on-premises and is not related to user authentication. C. Windows AutoPilot is a solution for simplifying the deployment of new devices but is not related to user authentication. D. Azure AD Application Proxy is a solution for publishing on-premises web applications to the internet and is not related to user authentication.

   Source: Adapted from community discussion — JayLearn2022

   Next question

2. Question 102 · 474 in bank

   DRAG DROP - You are a Microsoft 365 administrator for a company. A customer submits a data subject request (DSR) to delete customer information in compliance with General Data Protection Regulation (GDPR). You must place legal holds on related data whenever possible. You need to respond to the request by searching for the customer's data in various Microsoft 365 tools. How should you search for the data? To answer, drag the appropriate search methods to the correct Microsoft 365 applications. Each search method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/gdpr-dsr-office365#part-1-responding-to-dsrs-for-customer-data

   References

   • Microsoft Learn

   

   Next question

3. Question 103 · 474 in bank

   HOTSPOT - A company deploys Microsoft Intune. An employee loses a Windows 10 device that contains corporate data. You need to ensure that the corporate data on the device is secured as quickly as possible. Which four options can you use? To answer, select the appropriate actions in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Four options are : - Retire - Wipe - Fresh Start (+ unselecting the option "Retain user data") - Remote lock (lock the device and force the user to enter its PIN Code ) => It secures the data. - Delete is a wrong answer : it only removes the device from the Intune list.

   Source: Adapted from community discussion — TheExpert

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 104 · 474 in bank

   You are the Microsoft 365 administrator for a company. All staff must use Microsoft Outlook to access corporate email. When users access Outlook on mobile devices, they must use a PIN to open the application. You need to implement a Microsoft Intune policy to enforce the security requirements. Which policy should you use?

   • Adevice compliance
   • Bdevice configuration
   • Capp protection
   • Dapp configuration

   Show answer

   Answer: C

   Explanation

   The correct policy to use is C. app protection. **Explanation:** - **App protection policies** in Microsoft Intune are used to protect company data at the application level. These policies can enforce requirements such as requiring a PIN to access specific applications, like Microsoft Outlook, on mobile devices. - **Device compliance policies** ensure that devices meet certain security requirements before they can access company resources, but they do not specifically enforce app-level security settings. - **Device configuration policies** are used to configure settings on devices, but they do not specifically target app-level security requirements. - **App configuration policies** are used to configure settings within applications, but they do not enforce security requirements like requiring a PIN to open an app. Therefore, to enforce the requirement that users must use a PIN to open the Outlook application on mobile devices, you should use an **app protection policy**.

   Source: Adapted from community discussion — Tamar1000BC

   References

   • Microsoft Learn

   Next question

5. Question 105 · 474 in bank

   HOTSPOT - You need to configure a data governance solution for your company. The solution must meet the following requirements: ✑ Classify documents ✑ Ensure that classifications are enforced ✑ Delete documents that are no longer used Which actions should you perform? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://www.recordpoint.com/advanced-data-governance-labels/

   References

   • Microsoft Learn

   

   Next question

6. Question 106 · 474 in bank

   DRAG DROP - You are the Microsoft 365 administrator for a company. You need to identify available cloud security features. Match each feature to the correct description. To answer, drag the appropriate feature from the column on the left to its description on the right. Each feature may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/cloud-app-security/discovered-apps https://www.microsoft.com/en-us/itshowcase/using-azure-information-protection-to-classify-and-label-corporate-data https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview https://docs.microsoft.com/en-us/azure/security-center/security-center-virtual-machine-protection

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 107 · 474 in bank

   A company deploys Exchange Online and SharePoint Online. You must audit and assessment reports for the Microsoft 365 cloud services that the company uses. You need to provide the required documents. Which Microsoft site should you use to obtain this information?

   • ACompliance Manager
   • BService Trust Portal
   • COffice 365 Security and Compliance Center
   • DAzure portal

   Show answer

   Answer: B

   Explanation

   B. Service Trust Portal is the correct site to obtain audit and assessment reports for Microsoft 365 cloud services, including Exchange Online and SharePoint Online. The Service Trust Portal provides customers with a comprehensive view of how Microsoft implements and supports security, compliance, and privacy in Microsoft cloud services. It includes audit reports and other compliance documentation that can be used to assess Microsoft's security and compliance controls. The Compliance Manager (A) is a tool within the Office 365 Security and Compliance Center (C) that helps organizations manage their compliance activities. The Office 365 Security and Compliance Center (C) provides a centralized location for managing security and compliance across various Office 365 services, but it does not provide audit and assessment reports. The Azure portal (D) is primarily used for managing Azure resources and does not provide audit and assessment reports for Office 365 services.

   Source: Adapted from community discussion — neozed

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 108 · 474 in bank

   HOTSPOT - A company uses Microsoft 365 Business to address its compliance needs. A customer requests a complete disclosure of all personal data that relates to them. You need to create a new data subject request (DSR) case and ensure that compliance managers can view all DSR case findings. In which two areas must you perform actions? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   This all looks very outdated; https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-manage-gdpr-data-subject-requests-with-the-dsr-case-tool?view=o365-worldwide#step-2-create-a-uds-case-and-add-members Purview Compliance portal 1 - assign permission to case member 2- create uds case and add members: - compliance - Data subjects requests - User data search, create a case -new user data search...

   Source: Adapted from community discussion — ptmk

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 109 · 474 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: No - You can only assign apps to devices that are enrolled with Intune. You cannot assign apps to devices that are not enrolled with Intune. Box 2: No - You can assign wrapped apps or apps that incorporate the Intune SDK to devices that are not enrolled with Intune. Box 3: Yes - You can install available apps from the web-based Company Portal to devices that are enrolled with Intune and devices that are not enrolled with Intune. Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-deploy

   Source: Adapted from community discussion — oxaytol

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 110 · 474 in bank

    HOTSPOT - A company needs to protect documents and emails by automatically applying classifications and labels. You must minimize costs. What should the company implement? To answer, select the appropriate option in the answer area. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://azure.microsoft.com/en-us/pricing/details/information-protection/

    Source: Adapted from community discussion — Lordofthe7

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-900 practice, question 101. 474 questions available.