MS-900 practice questions 151–160

1. Question 151 · 474 in bank

   DRAG DROP - You are the Microsoft 365 administrator for a company. You need to identify available cloud security features. Match each feature to the correct description. To answer, drag the appropriate feature from the column on the left to its description on the right. Each feature may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://www.microsoft.com/en-us/itshowcase/using-azure-information-protection-to-classify-and-label-corporate-data https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

   

   Next question

2. Question 152 · 474 in bank

   A company uses Microsoft 365. The company must identify which cloud apps and services are used in the company. You need to identify which service can be used to find this information. Which service should you use?

   • AMicrosoft Defender for Office 365
   • BMicrosoft Cloud App Security
   • CAzure Security Center
   • DAzure Active Directory

   Show answer

   Answer: B

   Explanation

   Reference: https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

   Source: Adapted from community discussion — JayLearn2022

   References

   • Microsoft Learn

   Next question

3. Question 153 · 474 in bank

   HOTSPOT - You are a Microsoft 365 administrator. You need to implement the appropriate features for each scenario. What should you implement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 154 · 474 in bank

   Select 2

   You manage a local Active Directory Domain Services environment. Your company purchases an Enterprise E1 license for all users. You need to implement self-service password reset. You want to achieve this goal while minimizing costs. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AUpgrade your subscription to Azure AD Premium P2.
   • BDeploy Azure AD Connect.
   • CDeploy Azure Information Protection.
   • DUpgrade your subscription to Azure AD Premium P1.

   Show answer

   Answer: BD

   Explanation

   i agree with neozed. B. Deploy Azure AD Connect: Azure AD Connect is a free tool that enables synchronization of on-premises Active Directory objects with Azure AD. It is required for implementing self-service password reset in an on-premises AD environment. D. Upgrade your subscription to Azure AD Premium P1: Azure AD Premium P1 is the minimum license required for implementing self-service password reset. It provides the necessary features for end-user password reset, including password writeback to on-premises AD. This license is less expensive than Azure AD Premium P2, which includes additional features such as conditional access and identity protection. Therefore, the correct answers are B and D.

   Source: Adapted from community discussion — Cooljoy7777

   References

   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn

   Next question

5. Question 155 · 474 in bank

   Select 2

   You are a Microsoft 365 administrator for a company. What are two ways that you can ensure data security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Aservice-level encryption using customer-provided key
   • Btenant-dedicated Microsoft Azure AD encryption using customer-provided key
   • Csingle-tenant infrastructure partitions for sensitive data
   • Ddata transfer using transport-layer security (TLS)

   Show answer

   Answer: AD

   Explanation

   The two ways that you can ensure data security in Microsoft 365 are: A. Service-level encryption using customer-provided key: This ensures that data is encrypted when it's at rest or in transit between datacenters. The customer has full control over the encryption keys used to secure their data, ensuring that only authorized parties can access it. D. Data transfer using transport-layer security (TLS): This ensures that data is encrypted when it's in transit between devices and servers. TLS is used to secure data transfer in many protocols, including HTTP, SMTP, and FTP. By using TLS, you can protect against eavesdropping, tampering, and message forgery. Note that options B and C are not correct because Microsoft Azure AD encryption is not customer-provided and single-tenant infrastructure partitions are not related to data security.

   Source: Adapted from community discussion — JayLearn2022

   References

   • Microsoft Learn

   Next question

6. Question 156 · 474 in bank

   Your company makes use of Microsoft 365 in their environment. You have been tasked with making sure that admin roles are protected. The feature you use should achieve this by requiring approvals. Which of the following is a feature you should use?

   • AMobile application protection policy.
   • BMicrosoft Azure AD Identity Protection.
   • CMicrosoft Azure AD Privilege Identity Protection.
   • DMicrosoft Azure AD Conditional Access.

   Show answer

   Answer: C

   Explanation

   Answer is C. You cant configure or protect Admin accounts without Privileged Identity Management. Azure AD Identity Protection is for monitoring and protecting USER accounts not ADMIN accounts.

   Source: Adapted from community discussion — rabadonqz

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 157 · 474 in bank

   A company uses Azure Active Directory. The company requires that authentication requests from client applications that do not support modern authentication are blocked. You need to identify the policy that meets the requirement. Which policy should you select?

   • AConditional Access
   • BMulti-factor authentication registration
   • CSign-in risk
   • DUser risk

   Show answer

   Answer: A

   Explanation

   Conditional Access allows you to define access policies based on various conditions, such as user, device, location, and client application. By configuring a Conditional Access policy, you can enforce modern authentication requirements and block authentication requests from client applications that do not support modern authentication protocols.

   Source: Adapted from community discussion — SuperDC

   Next question

8. Question 158 · 474 in bank

   Select 3

   You are a Microsoft 365 administrator for a company. You need to identify security vulnerabilities by using the Office 365 Attack Simulator. Which three attack simulations are available? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • ABrute-force password
   • BCross-site scripting
   • CPassword-spray
   • DDenial-of-service
   • EDisplay name spear-phishing

   Show answer

   Answer: ACE

   Explanation

   Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulator

   Source: Adapted from community discussion — JayLearn2022

   References

   • Microsoft Learn

   Next question

9. Question 159 · 474 in bank

   DRAG DROP - A company plans to use Microsoft 365 Defender. Which services should you use? To answer, drag the appropriate services to the correct requirements. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/microsoft-365-defender?view=o365-worldwide

   Source: Adapted from community discussion — B0bacer

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 160 · 474 in bank

    HOTSPOT - Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct match is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-900 practice, question 151. 474 questions available.