MS-900 practice questions 121–130

1. Question 121 · 474 in bank

   You are the Microsoft 365 administrator for a company. Your company plans to open a new office in the United Kingdom. You need to provide penetration test and security assessment reports for the new office. Where can you locate the required reports?

   • AData Governance page of the Security and Compliance portal
   • BCompliance Manager page of the Services Trust portal
   • CData Loss Prevention page of the Security and Compliance portal
   • DRegional Compliance page of the Services Trust portal

   Show answer

   Answer: D

   Explanation

   https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide: "Compliance Manager has moved from the Service Trust Portal to its new location in the Microsoft 365 compliance center" Answer is D

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn

   Next question

2. Question 122 · 474 in bank

   HOTSPOT - An organization plans to deploy Microsoft Intune. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Yes Yes No is correct https://docs.microsoft.com/en-us/mem/intune/apps/apps-selective-wipe: "But you might not want to remove personal data on the device, especially if the device is an employee-owned device"

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 123 · 474 in bank

   You are the Microsoft Office 365 administrator for a company. You need to perform security and compliance reviews before new updates are distributed to the entire company. What should you implement?

   • Astandard releases
   • BMicrosoft 365 Enterprise Test Lab
   • Ctargeted releases
   • DFastTrack

   Show answer

   Answer: C

   Explanation

   Reference: https://docs.microsoft.com/en-us/office365/admin/manage/release-options-in-office-365?view=o365-worldwide

   Source: Adapted from community discussion — alessandro2039

   Next question

4. Question 124 · 474 in bank

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You have recently made use of Windows Autopilot to deploy Windows 10 devices in your company's environment. You have been asked to make sure that data that stored in OneDrive for Business is available to users from remote locations. Solution: You enable Microsoft Azure AD multi-factor authentication for the users. Does the solution meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   Answer is B. You have the 3 data constructs. Authentication, Availability and Integrity. MFA is down as Authentication (its in the name) not Availability.

   Source: Adapted from community discussion — Billbo555

   References

   • Microsoft Learn

   Next question

5. Question 125 · 474 in bank

   DRAG DROP - A company purchases Microsoft 365 E5. You need to determine which security features you should implement. Which features should you implement? To answer, drag the appropriate features to the correct scenarios. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

6. Question 126 · 474 in bank

   A company has a Microsoft 365 subscription that includes Office apps. A user has identified a new issue while working with an app. When the user attempts to create a support request, the following message displays:

   

   You need to determine the cause of the error message. What is the cause?

   • AThe user account is disabled.
   • BThe user does not have a license assigned for the app.
   • CThe user account is not a member of the global admin role.
   • DThe company does not have Premier support.

   Show answer

   Answer: C

   Explanation

   A is wrong for sure; if it is disabled you can't even use it B and D don't address the issue of permission C is correct

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn

   Next question

7. Question 127 · 474 in bank

   Your company purchases Microsoft 365 E3 and Azure AD P2 licenses. You need to provide identity protection against login attempts by unauthorized users. What should you implement?

   • AAzure AD Identity Protection
   • BAzure AD Privileged Identity Management
   • CAzure Information Protection
   • DAzure Identity and Access Management

   Show answer

   Answer: A

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview

   Source: Adapted from community discussion — syu31svc

   Next question

8. Question 128 · 474 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/sensitivity-labels

   Source: Adapted from community discussion — B0bacer

   References

   • Microsoft Learn

   

   Next question

9. Question 129 · 474 in bank

   Select 2

   You are a Microsoft 365 administrator for a company. Employees use Microsoft Office 365 ProPlus to create documents. You need to implement document classification and protection by using Microsoft Azure Information Protection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AAdd an Azure subscription to your Microsoft 365 tenant
   • BInstall the Azure Information Protection client
   • CCreate a custom Azure Information Protection policy with the Confidential label
   • DEnable the default Azure Information Protection policy
   • EInstall the Rights Management Service client

   Show answer

   Answer: AD

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/information-protection/requirements https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-default

   Source: Adapted from community discussion — Rooks

   References

   • azure.microsoft.com documentation
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 130 · 474 in bank

    DRAG DROP - Your company has a Microsoft 365 subscription. You need to implement security policies to ensure that sensitive data is protected. Which tools should you use? To answer, drag the appropriate tools to the correct scenarios. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Use the Microsoft Authenticator app to enable multi-factor authentication --->Identity and access management(IAM) https://docs.microsoft.com/en-us/azure/security/fundamentals/identity-management-best-practices "Enforce multi-factor verification for users" Classify documents to restrict permission to content --->Information rights management(IRM) https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-irm-to-a-list-or-library?view=o365-worldwide "select the Restrict permission to documents in this library on download check box to apply restricted permission to documents users download from this list or library." Use a dashboard for data-protection recommendations --->Compliance Manager https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide Provide auditors and regulators with reports on data-protection status --->Compliance Manager https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide

    Source: Adapted from community discussion — B0bacer

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-900 practice, question 121. 474 questions available.