Microsoft MS-101 Microsoft 365 Mobility and Security Online Training
Microsoft MS-101 Online Training
The questions for MS-101 were last updated at Jan 22,2025.
- Exam Code: MS-101
- Exam Name: Microsoft 365 Mobility and Security
- Certification Provider: Microsoft
- Latest update: Jan 22,2025
HOTSPOT
You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You have devices enrolled in Intune as shown in the following table.
You create the device configuration profiles shown in the following table.
Which profiles will be applied to each device? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription.
From the Security & Compliance admin center, you create a content search of all the mailboxes that contain the word Project X.
You need to export the results of the content search.
What do you need to download the report?
- A . a certification authority (CA) certificate
- B . an export key
- C . a password
- D . a user certificate
In Microsoft 365, you configure a data loss prevention (DLP) policy named Policy1. Policy1 detects the sharing of United States (US) bank account numbers in email messages and attachments.
Policy1 is configured as shown in the exhibit. (Click the Exhibit tab.)
You need to ensure that internal users can email documents that contain US bank account numbers to external users who have an email suffix of contoso.com.
What should you configure?
- A . an action
- B . a group
- C . an exception
- D . a condition
You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Endpoint Manager.
Devices are onboarded by using Microsoft Defender for Endpoint.
You plan to block devices based on the results of the machine risk score calculated by Microsoft Defender for Endpoint.
What should you create first?
- A . a device configuration policy
- B . a device compliance policy
- C . a conditional access policy
- D . an endpoint detection and response policy
You have Windows 10 devices that are managed by using Microsoft Endpoint Manager.
You need to configure the security settings in Microsoft Edge.
What should you create in Microsoft Endpoint Manager?
- A . an app configuration policy
- B . an app
- C . a device configuration profile
- D . a device compliance policy
HOTSPOT
You have a Microsoft 365 tenant that contains devices enrolled in Microsoft Intune.
The devices are configured as shown in the following table.
You plan to perform the following device management tasks in Microsoft Endpoint Manager:
✑ Deploy a VPN connection by using a VPN device configuration profile.
✑ Configure security settings by using an Endpoint Protection device configuration profile.
You support the management tasks.
What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You have a Microsoft 36S subscription.
Your company purchases a new financial application named App1.
From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover that many applications have a low score because they are missing information about domain registration and consumer popularity.
You need to prevent the missing information from affecting the App1 score.
What should you configure from the Cloud Discover settings?
- A . Organization details
- B . Default behavior
- C . Score metrics
- D . App tags
You have a Microsoft 365 E5 tenant.
You plan to deploy a monitoring solution that meets the following requirements:
✑ Captures Microsoft Teams channel messages that contain threatening or violent language.
✑ Alerts a reviewer when a threatening or violent message is identified.
What should you include in the solution?
- A . Data Subject Requests (DSRs)
- B . Insider risk management policies
- C . Communication compliance policies
- D . Audit log retention policies
HOTSPOT
You have a Microsoft 365 E5 tenant.
You have a sensitivity label configured as shown in the Sensitivity label exhibit. (Click the Sensitivity label tab.)
You have an auto-labeling policy as shown in the Auto-labeling policy exhibit. (Click the Auto-labeling policy tab.)
A user sends an email that contains the components shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
HOTSPOT
You have 2,500 Windows 10 devices and a Microsoft 365 E5 tenant that contains two users named User1 and User2. The devices are not enrollment in Microsoft Intune.
In Microsoft Endpoint Manager, the Device limit restrictions are configured as shown in the following exhibit.
In Azure Active Directory (Azure AD), the Device settings are configured as shown in the following exhibit.
From Microsoft Endpoint Manager, you add User2 as a device enrollment manager (DEM).
For each of the following statement, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.