MS-900 practice questions 341–350

1. Question 341 · 474 in bank

   Select 2

   A company is evaluating Microsoft 365. You need to identify concepts of using the principle of least privilege. Which two concepts should you identify? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AJust-in-time access
   • BJust-enough-access
   • CAzure AD multifactor authentication
   • DBlocking legacy authentication

   Show answer

   Answer: AB

   Explanation

   Just-in-Time (JIT) access and Just-Enough-Access (JEA) are concepts of using the least privilege. JIT access is a security protocol where permission to access applications or systems is only for a preset limited timeframe on an as-needed basis. This prevents the risks associated with standing privileges that hackers or fraudulent insiders can exploit1. JEA is a model that provides service team engineers with temporary privileged access to production environments when such access is required to support Microsoft online services. Answer is correct.

   Source: Adapted from community discussion — NVAV

   Next question

2. Question 342 · 474 in bank

   DRAG DROP - A company is evaluating Microsoft 365. You need to identify features of Zero Trust. Which features should you choose? To answer, drag the appropriate features to the correct capabilities. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

3. Question 343 · 474 in bank

   HOTSPOT - A company is evaluating security capabilities of Microsoft Sentinel. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   SOAR vs. SIEM If you’re exploring security solutions, then you’ve likely come across a related security tool with a similar-sounding acronym: security information and event management (SIEM). What is SIEM, and how does it differ from SOAR? When should one solution be used over the other? While SOAR tools are primarily used to orchestrate and automate threat response, SIEM offers greater visibility into activity through threat detection, log management, incident analysis, and regulatory and standards compliance. This visibility is achieved by logging and consolidating multiple streams of data from across your network, providing a bird’s-eye view of your organization’s overall security landscape. The two systems work best in tandem. SIEM collects and analyzes data, SOAR runs based on that data—forming a complete solution for risk detection, visibility, and response. Answer: NO, NO, Yes

   Source: Adapted from community discussion — BhavyaSangam

   

   Next question

4. Question 344 · 474 in bank

   A company has Microsoft 365 E3 licenses. Users require Microsoft 365 E5 licenses instead of the Microsoft 365 E3 licenses. You reed to recommend a licensing solution that minimizes costs. What should you recommend?

   • AStep-up user subscription licenses
   • BAdd-on user subscription licenses
   • CSoftware Assurance user subscription licenses
   • DFun user subscription licenses

   Show answer

   Answer: A

   Next question

5. Question 345 · 474 in bank

   A retail company is planning to upgrade their Windows 7 point-of-sale terminals to Windows 10. You have been informed that the terminals should only be upgraded again after a minimum of five years. Your solution has to allow for the scheduling of upgrades and updates to be executed consistently for al devices, while also keeping costs to a minimum. Which of the following is the version of windows you should upgrade to?

   • AWindows 10 Home
   • BWindows 10 Pro
   • CWindows 10 Enterprise
   • DWindows 10 Enterprise LTSC

   Show answer

   Answer: D

   Explanation

   Read The question Your solution has to allow for the scheduling of upgrades and updates to be executed consistently for al devices, while also keeping costs to a minimum. D. Windows 10 Enterprise LTSC (Long-Term Servicing Channel) Reasons: Long-Term Support: Windows 10 Enterprise LTSC is designed for devices that do not need to receive feature updates regularly. It provides extended support, with updates only for security and critical issues, making it suitable for devices that should only be upgraded after a long period. Consistency: LTSC editions do not receive bi-annual feature updates like other Windows editions, ensuring that the software environment remains stable and consistent over time. Cost Efficiency: Although initial costs might be higher compared to other editions, the reduced need for frequent upgrades and maintenance over a five-year period can lead to overall cost savings.

   Source: Adapted from community discussion — mamash

   Next question

6. Question 346 · 474 in bank

   DRAG DROP - A company uses Microsoft 365. The company provisions employee user accounts in Active Directory and synchronizes the accounts to Azure Active Directory (Azure AD). The company provisions contractor user accounts in Azure AD. The company has the following business requirements: • Employees in the sales department and contractors must be enabled for self-service password reset (SSPR). • Employees in management must be enabled for conditional access policies. The company requires a solution that has the least cost. You need to implement the appropriate Azure AD edition for the users. What should you use? To answer, drag the appropriate Azure AD editions to the correct users. Each Azure AD edition may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct match is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Azure AD P1 (Sales Users are created in Windows AD and Synchronized to Azure AD - You need Azure AD P1 to provide self-service password change with on-premise write-back) Azure AD P1 (Conditional Access needs Azure AD P1 at minimum) Azure AD Free (The company provisions contractor user accounts in Azure AD. Azure AD Free includes Self-Service Password change for native Cloud Users)

   Source: Adapted from community discussion — north4

   References

   • Microsoft Learn

   

   Next question

7. Question 347 · 474 in bank

   DRAG DROP - A company deploys Azure App Services apps in Azure. Users authenticate to the apps by using single sign-on (SSO). The company requires access to the apps from the following types of devices: • Personal devices that do not require an organizational account to sign in to the device. • Company devices in on-premises Active Directory that are automatically provisioned in Azure Active Directory (Azure AD). You need to identify how the devices will be provisioned in Azure AD. What should you use? To answer, drag the appropriate Azure AD device identities to the correct requirements. Each Azure AD device identity may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

8. Question 348 · 474 in bank

   HOTSPOT - A company is evaluating threat protection solutions of Microsoft 365. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

9. Question 349 · 474 in bank

   A company uses Microsoft 365. The company requires a survey that must be set up as follows: • Provide real-time results. • Support built-in analytics to evaluate responses. • Be able to export results to Microsoft Excel. You need to implement a solution. What should you use?

   • ATo Do
   • BProject
   • CForms
   • DPlanner
   • ELists

   Show answer

   Answer: C

   Next question

10. Question 350 · 474 in bank

    HOTSPOT - A company is evaluating Microsoft 365. You need to identify the capabilities of Microsoft Exchange. Which feature should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-900 practice, question 341. 474 questions available.