Exams > Microsoft > MS-900: Microsoft 365 Fundamentals
MS-900: Microsoft 365 Fundamentals
Page 17 out of 36 pages Questions 161-170 out of 360 questions
Question#161

A company uses Microsoft 365.
The company wants to improve their compliance score based on Microsoft recommendations.
You need to identify the task that has the largest impact to the compliance score.
Which task should you choose?

  • A. Detective discretionary
  • B. Preventative mandatory
  • C. Corrective discretionary
  • D. Corrective mandatory
Discover Answer Hide Answer

Answer: B
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud

Question#162

A company uses Microsoft 365.
The company needs to remotely encrypt devices.
You need to identify which solution meets the requirement.
Which solution should you choose?

  • A. Microsoft Intune
  • B. Retention labels
  • C. Azure Information Protection scanner
  • D. Sensitivity labels
Discover Answer Hide Answer

Answer: A
Use Intune to configure BitLocker Drive Encryption on devices that run Windows 10.
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/encrypt-devices

Question#163

HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Discover Answer Hide Answer

Answer:
Note:
The old (classic) version of Compliance was in the Service Trust portal and still is. The GA release version has moved to the Microsoft 365 Compliance Center.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager

Question#164

HOTSPOT -
Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Discover Answer Hide Answer

Answer:
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp

Question#165

DRAG DROP -
You are the Microsoft 365 administrator for a company.
You need to identify available cloud security features.
Match each feature to the correct description. To answer, drag the appropriate feature from the column on the left to its description on the right. Each feature may be used once, more than once, or not at all.
NOTE: Each correct selection is worth one point.
Select and Place:

Discover Answer Hide Answer

Answer:
Reference:
https://www.microsoft.com/en-us/itshowcase/using-azure-information-protection-to-classify-and-label-corporate-data https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Question#166

A company uses Microsoft 365.
The company must identify which cloud apps and services are used in the company.
You need to identify which service can be used to find this information.
Which service should you use?

  • A. Microsoft Defender for Office 365
  • B. Microsoft Cloud App Security
  • C. Azure Security Center
  • D. Azure Active Directory
Discover Answer Hide Answer

Answer: B
Reference:
https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

Question#167

HOTSPOT -
You are a Microsoft 365 administrator.
You need to implement the appropriate features for each scenario.
What should you implement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Discover Answer Hide Answer

Answer:
Reference:
https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

Question#168

You manage a local Active Directory Domain Services environment. Your company purchases an Enterprise E1 license for all users.
You need to implement self-service password reset. You want to achieve this goal while minimizing costs.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. Upgrade your subscription to Azure AD Premium P2.
  • B. Deploy Azure AD Connect.
  • C. Deploy Azure Information Protection.
  • D. Upgrade your subscription to Azure AD Premium P1.
Discover Answer Hide Answer

Answer: BD

Question#169

You are a Microsoft 365 administrator for a company.
What are two ways that you can ensure data security? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

  • A. service-level encryption using customer-provided key
  • B. tenant-dedicated Microsoft Azure AD encryption using customer-provided key
  • C. single-tenant infrastructure partitions for sensitive data
  • D. data transfer using transport-layer security (TLS)
Discover Answer Hide Answer

Answer: AD

Question#170

A company uses Azure Active Directory.
The company requires that authentication requests from client applications that do not support modern authentication are blocked.
You need to identify the policy that meets the requirement.
Which policy should you select?

  • A. Conditional Access
  • B. Multi-factor authentication registration
  • C. Sign-in risk
  • D. User risk
Discover Answer Hide Answer

Answer: A
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

chevron rightPrevious Nextchevron right