MS-900 practice questions 181–190

1. Question 181 · 474 in bank

   Select 3

   A company is evaluating Microsoft Azure Conditional Access policies. You reed to determine which scenarios Conditional Access policies support. Which three scenarios should you select? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AMulti-factor authentication
   • BSelf-service password reset capabilities
   • CHybrid Azure Active Directory joined device
   • DBlocked access to Microsoft 365 services for unverified users
   • EBitLocker deployment

   Show answer

   Answer: ACD

   Explanation

   AC: Common Azure Conditional Access policies decisions * Block access Most restrictive decision - * Grant access Least restrictive decision, can still require one or more of the following options: Require multi-factor authentication Require device to be marked as compliant Require Hybrid Azure AD joined device Require approved client app - Require app protection policy (preview) D: For customers with access to Identity Protection, user risk can be evaluated as part of a Conditional Access policy. User risk represents the probability that a given identity or account is compromised. Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions

   Source: Adapted from community discussion — north4

   References

   • Microsoft Learn

   Next question

2. Question 182 · 474 in bank

   DRAG DROP - An organization plans to deploy Microsoft 365 in a hybrid scenario. You need to provide a recommendation based on some common identity and access management scenarios. The solution must minimize costs. Match each solution to its appropriate scenario. To answer, drag the appropriate solutions from the column on the left to the scenarios on the right. Each solution may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta

   Source: Adapted from community discussion — wando5000

   

   Next question

3. Question 183 · 474 in bank

   You are the Microsoft 365 administrator for a company. An employee requests personal data under General Data Protection Regulation (GDPR) guidelines. You need to retrieve data for the employee. What should you do?

   • ACreate a data subject request case.
   • BCreate a retention policy.
   • CCreate a data-loss prevention policy.
   • DCreate a GDPR assessment.

   Show answer

   Answer: A

   Explanation

   Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/gdpr-dsr-office365

   References

   • Microsoft Learn

   Next question

4. Question 184 · 474 in bank

   HOTSPOT - A company plans to deploy Microsoft Intune. Which scenarios can you implement by using Intune? To answer, select the appropriate answer for the given scenarios. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Yes - You can protect access to Exchange on-premises mailboxes by creating Intune app protection policies for Outlook for iOS/iPadOS and Android enabled with hybrid Modern Authentication. Box 2: No - App protection policies are not supported for other apps that connect to on-premises Exchange or SharePoint services. Box 3: No - App protection policies can be configured for apps that run on devices that are not enrolled in any mobile device management solution: These devices are typically employee owned devices that aren't managed or enrolled in Intune or other MDM solutions. Reference: https://docs.microsoft.com/en-us/intune/app-protection-policy

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 185 · 474 in bank

   DRAG DROP - You have a hybrid environment that includes Microsoft Azure AD. On-premises applications use Active Directory Domain Services (AD DS) for authentication. You need to determine which authentication methods to use. Match each feature to its authentication source. To answer, drag the appropriate authentication sources from the column on the left to the features on the right. Each authentication source may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-identity-verification

   Source: Adapted from community discussion — wando5000

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 186 · 474 in bank

   A company has a Microsoft 365 subscription. Employees are permitted to use devices that the company does not own to access company data in the cloud. You need to restrict employees from copying data to personal OneDrive folders. What should you use?

   • AInformation Rights Management
   • BMicrosoft Azure Security Center
   • CMicrosoft Defender for Office 365
   • DMicrosoft Endpoint Manager

   Show answer

   Answer: D

   Explanation

   Reference: https://docs.microsoft.com/en-us/intune/app-protection-policy

   Source: Adapted from community discussion — MvdH81Rijswijk

   References

   • Microsoft Learn

   Next question

7. Question 187 · 474 in bank

   Select 2

   You are the network administrator of a company. The Microsoft 365 tenant contains sensitive information. Employees must verify their identities when they sign into Microsoft 365 by providing information in addition to their Azure AD password. You need to select the tools that employees can use to verify their identities. Which two tools should you select? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • ACustomer Lockbox for Office 365
   • BAzure Security Center
   • CWindows Hello for Business
   • DMicrosoft Authenticator

   Show answer

   Answer: CD

   References

   • Microsoft Learn

   Next question

8. Question 188 · 474 in bank

   You need to move videos to a Microsoft 365 tenant and ensure that the contents are automatically transcribed. Which Microsoft 365 service should you use?

   • AYammer
   • BStream
   • CFlow

   Show answer

   Answer: B

   Explanation

   Microsoft Stream is used for video services, and includes deep search within automatic audio transcription. Reference: https://docs.microsoft.com/en-us/stream/office-365-video-feature-breakdown

   Source: Adapted from community discussion — JayLearn2022

   Next question

9. Question 189 · 474 in bank

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You have been tasked with deploying Microsoft 365 for your company in a hybrid configuration. You want to make sure that a smart card can be used by staff for authentication purposes. Solution: You configure the use of pass-through authentication and single sign-on as the hybrid identity solution. Does the solution meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   The solution described does not meet the goal of ensuring that a smart card can be used by staff for authentication purposes. Pass-through authentication and single sign-on do not inherently support smart card authentication. Smart card authentication typically requires configuring certificate-based authentication (CBA) or federated authentication with Active Directory Federation Services (AD FS).

   Source: Adapted from community discussion — Tamar1000BC

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 190 · 474 in bank

    Select 3

    An organization uses Microsoft 365 Business to secure their data. Many users install the organization's data on their personal tablets and phones. You need to protect the organization's data stored on users' devices. Which three features support device security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • ARemotely wiping company data
    • BEnabling Advanced Threat Protection for users
    • CDisabling the device remotely
    • DAutomatically deleting files after 90 days of inactivity
    • ERequiring users to have a PIN on their device

    Show answer

    Answer: ABE

    Explanation

    I think this one is correct. you can remotely wipe the data, you can request users have a PIN Answers A and E "Advanced Threat Protection is a security solution that defends against complex malware or hacking attacks that target sensitive data within an organization" - Ans B is out https://docs.microsoft.com/en-us/defender-for-identity/what-is "These settings include deleting files from an inactive device after a set period, encrypting work files, requiring that users set a PIN, and so on" https://docs.microsoft.com/en-us/microsoft-365/business/security-features?view=o365-worldwide A,D, and E

    Source: Adapted from community discussion — TMW

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-900 practice, question 181. 474 questions available.