Microsoft MS-101 Microsoft 365 Mobility and Security Online Training
Microsoft MS-101 Online Training
The questions for MS-101 were last updated at Dec 20,2024.
- Exam Code: MS-101
- Exam Name: Microsoft 365 Mobility and Security
- Certification Provider: Microsoft
- Latest update: Dec 20,2024
You have a Microsoft Azure Active Directory (Azure AD) tenant named Contoso.com.
You create a Microsoft Defender for identity instance Contoso.
The tenant contains the users shown in the following table.
You need to modify the configuration of the Defender for identify sensors.
Solutions: You instruct User3 to modify the Defender for identity sensor configuration.
Does this meet the goal?
- A . Yes
- B . No
You have a Microsoft 365 subscription
All users are assigned a Microsoft 365 E3 License.
You enable auditing for your organization.
What is the maximum amount of time data will be retained in the Microsoft 365 audit log?
- A . 2 years
- B . 1 year
- C . 30 days
- D . 90 days
You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.
You plan to review device startup performance issues by using Endpoint analytics.
Which devices can you monitor by using Endpoint analytics?
- A . Device1 only
- B . Device1 and Device2 only
- C . Device1, Device2, and Device3 only
- D . Device1, Device2, and Device4 only
- E . Device1, Device2, Device3, and Device4
HOTSPOT
You have an Azure subscription and an on-premises Active Directory domain. The domain contains 50
computers that run Windows 10.
You need to centrally monitor System log events from the computers.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
HOTSPOT
The SP800 assessment has the improvement actions shown in the following table.
HOTSPOT
You have a Microsoft 365 E5 tenant that contains the users shown in the following table.
You purchase the devices shown in the following table.
In Microsoft Endpoint Manager, you create an enrollment status page profile that has the following settings:
✑ Show app and profile configuration progress: Yes
✑ Allow users to collect logs about installation errors: Yes
✑ Only show page to devices provisioned by out-of-box experience (OOBE): No
✑ Assignments: Group2
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are deploying Microsoft Intune.
You successfully enroll Windows 10 devices in Intune.
When you try to enroll an iOS device in Intune, you get an error.
You need to ensure that you can enroll the iOS device in Intune.
Solution: You create the Mobility (MDM and MAM) settings.
Does this meet the goal?
- A . Yes
- B . No
You purchase a new computer that has Windows 10, version 2004 preinstalled.
You need to ensure that the computer is up-to-date. The solution must minimize the number of updates installed.
What should you do on the computer?
- A . Install all the feature updates released since version 2004 and all the quality updates released since version 2004 only.
- B . install the West feature update and the latest quality update only.
- C . install all the feature updates released since version 2004 and the latest quality update only.
- D . install the latest feature update and all the quality updates released since version 2004.
You have a Microsoft 365 E5 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to ensure that users can enroll devices in Microsoft Endpoint Manager without manually entering the address of Microsoft Endpoint Manager.
Which two DNS records should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A . a CNAME record for AutoDiscover.contoso.com
- B . a CNAME record for EnterpriseEnrollment.contoso.com
- C . a TXT record for EnterpriseRegistration.contoso.com
- D . an SRV record for _SIP._TLS.contoso.com
- E . an SRV record for _SIPfederationTLS.contoso.com
- F . a CNAME record for EnterpriseRegistration.contoso.com
- G . a TXT record for EnterpriseEnrollment.contoso.com
You have a Microsoft 365 E5 subscription.
You run an eDiscovery search that returns the following Azure Rights Management (Azure RMS) C encrypted content:
✑ Microsoft Exchange emails
✑ Microsoft OneDrive documents
✑ Microsoft SharePoint documents
Which content can be decrypted when you export the eDiscovery search results?
- A . Exchange emails only
- B . SharePoint documents, OneDrive documents, and Exchange emails
- C . OneDrive documents only
- D . SharePoint documents and OneDrive documents only
- E . SharePoint documents only