MS-900 practice questions 131–140

1. Question 131 · 474 in bank

   HOTSPOT - You are planning a Microsoft Azure AD solution for a company. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Azure AD: - Can't manage Azure AD joined machines using Group Policy - Does NOT support Secure LDAP - Does support ADAL No. NO. Yes

   Source: Adapted from community discussion — Ariana_Monalisa

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 132 · 474 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Single sign-on with MFA is rubbish MFA requires an external device MFA combines the use of password with an additional pin Answer is correct

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn

   

   Next question

3. Question 133 · 474 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

   

   Next question

4. Question 134 · 474 in bank

   A company uses Microsoft 365. The company needs to label emails and documents that contain confidential text. You need to identify a feature that meets this requirement. Which feature should you choose?

   • ACustomer Key
   • BSensitivity label
   • CMicrosoft Outlook rule
   • DRetention label

   Show answer

   Answer: B

   Explanation

   Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

   Next question

5. Question 135 · 474 in bank

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You have recently made use of Windows Autopilot to deploy Windows 10 devices in your company's environment. You have been asked to make sure that data that stored in OneDrive for Business is available to users from remote locations. Solution: You enroll the devices in Microsoft Intune. Does the solution meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. - You have recently made use of Windows Autopilot to deploy Windows 10 devices in your company's environment. - You have been asked to make sure that data that stored in OneDrive for Business is available to users from remote locations. Solution: You inform users that they should use their Microsoft Azure AD credentials to sign in to their devices. Does the solution meet the goal?

   Source: Adapted from community discussion — JayLearn2022

   References

   • Microsoft Learn

   Next question

6. Question 136 · 474 in bank

   HOTSPOT - Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://www.microsoft.com/en-ww/security/business/graph-security-api https://docs.microsoft.com/en-us/azure/defender-for-cloud/secure-score-security-controls https://docs.microsoft.com/en-us/power-bi/admin/service-security-using-defender-for-cloud-apps-controls

   Source: Adapted from community discussion — Tole000419

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 137 · 474 in bank

   DRAG DROP - A company uses Microsoft 365. You need to identify the appropriate report for each definition. Which report should you choose for each definition? To answer, drag the appropriate reports to the correct definitions. Each report may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/cloud-app-security/tutorial-shadow-it

   Source: Adapted from community discussion — jim85

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 138 · 474 in bank

   Select 3

   A company deploys Microsoft Azure AD. You run the Identity Secure Score report. The report displays five security items. Which three security items on the report have the most impact on the score? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AEnable policy to block legacy authentication.
   • BEnable user risk policy.
   • CRequire multi-factor authentication for all users.
   • DDelete/block accounts not used in last 30 days.
   • EDo not expire passwords.

   Show answer

   Answer: ACE

   Explanation

   (MAX SCORE for each in brackets) A. Enable policy to block legacy authentication. (20) B. Enable user risk policy or sign-in policy. (Both have 30) C. Require multi-factor authentication for all users. (30) D. Delete/block accounts not used in last 30 days. (1) E. Do not expire passwords. (10) So Correct Answer is : ABC (Ref: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/identity-secure-score See Max score column for each)

   Source: Adapted from community discussion — Rstilekar

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 139 · 474 in bank

   You deploy Enterprise Mobility + Security E5 and assign Microsoft 365 licenses to all employees. Employees must not be able to share documents or forward emails that contain sensitive information outside the company. You need to enforce the file sharing restrictions. What should you do?

   • AUse Microsoft Azure Information Protection to define a label. Associate the label with an Azure Rights Management template that prevents the sharing of files or emails that are marked with the label.
   • BCreate a Microsoft SharePoint Online content type named Sensitivity. Apply the content type to other content types in Microsoft 365. Create a Microsoft Azure Rights Management template that prevents the sharing of any content where the Sensitivity column value is set to Sensitive.
   • CUse Microsoft Azure Information Rights Protection to define a label. Associate the label with an Active Directory Rights Management template that prevents the sharing of files or emails that are marked with the label.
   • DCreate a label named Sensitive. Apply a Data Layer Protection policy that notifies users when their document contains personally identifiable information (PII).

   Show answer

   Answer: A

   Explanation

   https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-protection: "When a document or email is protected by a Rights Management service, it is encrypted at rest and in transit. It can then be decrypted only by authorized users. This encryption stays with the document or email, even if it is renamed. In addition, you can configure usage rights and restrictions, such as the following examples: Only users within your organization can open the company-confidential document or email." A for answer

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 140 · 474 in bank

    HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth pone point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/compliance-manager-overview#controls https://docs.microsoft.com/en-us/office365/securitycompliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud https://docs.microsoft.com/en-us/office365/securitycompliance/get-started-with-service-trust-portal

    Source: Adapted from community discussion — deisenhower

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-900 practice, question 131. 474 questions available.