What is the best way to pass the Microsoft MS-101 exam? (First: Exam practice test,
Second: Lead4pass Microsoft expert.) You can get free Microsoft MS-101 exam practice test questions here. Or choose https://www.geekcert.com/role-based.html Study hard to pass the exam easily!
Table of Contents:
- Latest Microsoft MS-101 google drive
- Effective Microsoft MS-101 exam practice questions
- Related MS-101 Popular Exam resources
- Geekcert Year-round Discount Code
- What are the advantages of Lead4pass?
Latest Microsoft MS-101 google drive
[PDF] Free Microsoft MS-101 pdf dumps download from Google Drive: https://drive.google.com/open?id=1GWA8Jqht96ZO2LfC-rucvsDnrpexQY9Q
Exam MS-101: Microsoft 365 Mobility and Security：https://docs.microsoft.com/en-us/learn/certifications/exams/ms-101
Candidates for this exam are Microsoft 365 Enterprise Administrators who take part in evaluating, planning, migrating, deploying, and managing Microsoft 365 services. They perform Microsoft 365 tenant management tasks for an enterprise, including its identities, security, compliance, and supporting technologies.
Candidates have a working knowledge of Microsoft 365 workloads and should have been an administrator for at least one Microsoft 365 workload (Exchange, SharePoint, Skype for Business, or Windows as a Service). Candidates also have a working knowledge of networking, server administration, and IT fundamentals such as DNS, Active Directory, and PowerShell.
Skills measured
- Implement modern device services (30-35%)
- Implement Microsoft 365 security and threat management (30-35%)
- Manage Microsoft 365 governance and compliance (35-40%)
Latest updates Microsoft MS-101 exam practice questions
QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active
Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure pilot co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You unjoin Device1 from the Active Directory domain.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 2
Your company has a Microsoft 365 E5 subscription.
Users in the research department work with sensitive data.
You need to prevent the research department users from accessing potentially unsafe websites by using hyperlinks
embedded in email messages and documents. Users in other departments must not be restricted.
What should you do from the Security and Compliance admin center?
A. Create a data loss prevention (DLP) policy that has a Content is shared condition.
B. Modify the default safe links policy.
C. Create a data loss prevention (DLP) policy that has a Content contains condition.
D. Create a new safe links policy.
Correct Answer: D
References: https://docs.microsoft.com/en-us/office365/securitycompliance/set-up-atp-safe-links-policies#policies-that-
apply-to-specific-email-recipients
QUESTION 3
You have a Microsoft 365 subscription.
You have the devices shown in the following table.
You need to onboard the devices to Windows Defender Advanced Threat Protection (ATP). The solution must avoid
installing software on the devices whenever possible.
Which on boarding method should you use for each operating system? To answer, drag the appropriate methods to the
correct operating systems, Each method may be used once, more than once, or not at all. You may need to drag the
split bar between panes or scroll to view content NOTE: Each correct selection is worth one point.
Select and Place:
Correct Answer:
QUESTION 4
You have computers that run Windows 10 Enterprise and are joined to the domain.
You plan to delay the installation of new Windows builds so that the IT department can test application compatibility.
You need to prevent Windows from being updated for the next 30 days.
Which two Group Policy settings should you configure? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Select when Quality Updates are received
B. Select when Preview Builds and Feature Updates are received
C. Turn off auto-restart for updates during active hours
D. Manage preview builds
E. Automatic updates detection frequency
Correct Answer: BD
References: https://insider.windows.com/en-us/for-business-organization-admin/
QUESTION 5
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft 365
subscription. The company recently hired four new users who have the devices shown in the following table.
You configure the Microsoft 365 subscription to ensure that the new devices enroll in Microsoft Intune automatically.
A. User1 and User2 only
B. User 1, User2, and User only
C. User1, User2.User3, and User4
D. User2only
Correct Answer: C
QUESTION 6
You have a Microsoft 365 subscription that uses a default domain named contoso.com.
You have two users named User 1 and User2.
From the Security and Compliance admin center, you add User1 to the ediscovery Manager role group.
From the Security and Compliance admin center, User1 creates a case named Case1
You need to ensure that User1 can add User2 as a case member. The solution must use the principle of least privilege.
To which role group should you add User2?
A. eDiscovery Manager
B. eDiscovery Administrator
C. Security Administrator
Correct Answer: C
QUESTION 7
Your company has 5,000 Windows 10 devices. All the devices are protected by using Windows Defender Advanced
Threat Protection (ATP).
You need to view which Windows Defender ATP alert events have a high severity and occurred during the last seven
days.
What should you use in Windows Defender ATP?
A. the threat intelligence API
B. Automated investigations
C. Threat analytics
D. Advanced hunting
Correct Answer: B
References: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/investigate-alerts-windows-defender-advanced-threat-protection https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection
QUESTION 8
Your company uses Windows Defender Advanced Threat Protection (ATP). Windows Defender ATP includes the
machine groups shown in the following table.
You onboard a computer named computer1 to Windows Defender ATP as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 9
You create two device compliance policies for Android devices as shown in the following table.
You have the Android devices shown in the following table.
The users belong to the groups shown in the following table.
The users enroll their device in Microsoft Intune.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
References: https://docs.microsoft.com/en-us/intune-user-help/enroll-your-device-in-intune-android
QUESTION 10
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 11
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have a Microsoft 365 subscription.
You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to
your on-premises network.
Solution: From the Microsoft 365 admin center, you configure the Organization profile settings.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Conditional Access in SharePoint Online can be configured to use an IP Address white list to allow access.
References:
https://techcommunity.microsoft.com/t5/Microsoft-SharePoint-Blog/Conditional-Access-in-SharePoint-Online-and-OneDrive-for/ba-p/46678A
QUESTION 12
You need to protect the U.S. PII data to meet the technical requirements. What should you create?
A. a data loss prevention (DLP) policy that contains a domain exception
B. a Security and Compliance retention policy that detects content containing sensitive data
C. a Security and Compliance alert policy that contains an activity
D. a data loss prevention (DLP) policy that contains a user override
Correct Answer: C
References: https://docs.microsoft.com/en-us/office365/securitycompliance/create-activity-alerts
QUESTION 13
Your company has a Microsoft 365 E3 subscription.
All devices run Windows 10 Pro and are joined to Microsoft Azure Active Directory (Azure AD).
You need to change the edition of Windows 10 to Enterprise the next time users sign in to their computer. The solution
must minimize downtime for the users.
What should you use?
A. Windows Autopilot
B. Windows Update
C. Subscription Activation
D. an in-place upgrade
Correct Answer: A
References: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot
Related MS-101 Popular Exam resources
Geekcert Year-round Discount Code
What are the advantages of Lead4pass?
Lead4pass employs the most authoritative exam specialists from Microsoft, Cisco, CompTIA, IBM, EMC, etc. We update exam data throughout the year. Highest pass rate! We have a large user base. We are the industry leader! Choose Geekcert to pass the exam with ease!
Summarize:
It’s not easy to pass the Microsoft MS-101 exam, but with accurate learning materials and proper practice, you can crack the exam with excellent results. Lead4pass.com provides you with the most relevant learning materials that you can use to help you prepare.
